Browse CVEs

MEDIUM 5.4 CVE-2025-3614 The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of a custom wi… Elementskit Elementor Addons 3.5.3+ Fix from $1,6002025-07-24 MEDIUM 5.4 CVE-2025-4479 The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widg… Elementskit Elementor Addons 3.5.3+ Fix from $1,6002025-06-19 MEDIUM 5.4 CVE-2025-46253 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ataur R GutenKit gutenkit-blocks-addon allows S… Gutenkit 2.2.3+ Fix from $1,6002025-04-22 MEDIUM 5.4 CVE-2024-11180 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget ekit_countdown_time… Elementskit Elementor Addons 3.4.8+ Fix from $1,6002025-03-29 MEDIUM 5.3 CVE-2025-0968 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.0 du… Elementskit Elementor Addons 3.4.1+ Fix from $1,6002025-02-19 MEDIUM 5.4 CVE-2025-1005 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion widget in all ver… Elementskit Elementor Addons 3.4.1+ Fix from $1,6002025-02-15 MEDIUM 5.4 CVE-2025-0321 The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and in… Elementskit 3.7.9+ Fix from $1,6002025-01-28 CRITICAL 9.8 CVE-2023-50903 Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… Metform Elementor Contact Form Builder 3.4.1+ Fix from $2,3002024-12-09 MEDIUM 5.3 CVE-2024-37255 Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite… Elements Kit Elementor Addons 3.2.0+ Fix from $1,6002024-11-01 MEDIUM 5.4 CVE-2024-10091 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up… Elements Kit Elementor Addons 3.3.0+ Fix from $1,6002024-10-26 MEDIUM 5.4 CVE-2024-8546 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all versions up t… Elementskit Elementor Addons 3.2.8+ Fix from $1,6002024-09-25 MEDIUM 6.5 CVE-2024-43996 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ElementsKit ElementsKit Pro allows PHP Local File Inc… Elementskit after 3.6.0 Fix from $1,6002024-09-23 CRITICAL 9.8 CVE-2023-0714 The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in versions … Metform Elementor Contact Form Builder 3.3.0+ Fix from $2,3002024-08-17 MEDIUM 5.4 CVE-2024-7064 The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 3.… Elementskit 3.6.6+ Fix from $1,6002024-08-15 HIGH 8.8 CVE-2024-6698 The FundEngine plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.0. This is due to the plugin not … Fundengine 1.7.1+ Fix from $1,9502024-08-01 MEDIUM 5.3 CVE-2024-6455 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a miss… Elements Kit Elementor Addons 3.2.1+ Fix from $1,6002024-07-18 MEDIUM 5.4 CVE-2024-5263 The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and Table widgets in all versions … Elementskit 3.6.3+ Fix from $1,6002024-06-15 CRITICAL 9.6 CVE-2024-4404 The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' fu… Elementskit 3.6.3+ Fix from $2,3002024-06-14 HIGH 7.5 CVE-2024-4266 The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in… Metform Elementor Contact Form Builder 3.8.9+ Fix from $1,9502024-06-11 MEDIUM 5.4 CVE-2024-4452 The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 3.6.1… Elementskit 3.6.2+ Fix from $1,6002024-05-21 MEDIUM 5.3 CVE-2024-32685 Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate … Wp Ultimate Review 2.3.0+ Fix from $1,6002024-05-17 HIGH 7.5 CVE-2024-21746 Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultima… Wp Ultimate Review after 2.3.5 Fix from $1,9502024-05-17 HIGH 8.8 CVE-2024-33570 Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3. Metform Elementor Contact Form Builder 3.8.4+ Fix from $1,9502024-05-06 MEDIUM 5.4 CVE-2024-3650 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0… Elements Kit Elementor Addons 3.1.3+ Fix from $1,6002024-05-02 HIGH 8.8 CVE-2024-3500 The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspo… Elementskit 3.6.1+ Fix from $1,9502024-05-02 HIGH 8.8 CVE-2024-3499 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the gener… Elements Kit Elementor Addons 3.1.1+ Fix from $1,9502024-05-02 HIGH 7.5 CVE-2024-32684 Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5. Wp Ultimate Review 2.3.0+ Fix from $1,9502024-04-22 HIGH 7.5 CVE-2024-32683 Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.… Wp Ultimate Review 2.3.0+ Fix from $1,9502024-04-19 MEDIUM 5.4 CVE-2024-3598 The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, … Elementskit 3.6.1+ Fix from $1,6002024-04-19 MEDIUM 5.4 CVE-2024-32505 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roxnor ElementsKit Elementor addons Lite elemen… Elements Kit Elementor Addons 3.0.7+ Fix from $1,6002024-04-17