CVE-2024-5662 Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget

🗓️ 28 Jun 2024 08:33:29Reported by WordfenceType

Ultimate Post Kit Addons For Elementor plugin vulnerability in Social Count Widge

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2024-5662	28 Jun 202409:15	–	attackerkb
CNNVD	WordPress plugin Ultimate Post Kit Addons For Elementor Security Vulnerability	28 Jun 202400:00	–	cnnvd
CVE	CVE-2024-5662	28 Jun 202408:33	–	cve
EUVD	EUVD-2024-46836	8 Apr 202621:32	–	euvd
NVD	CVE-2024-5662	28 Jun 202409:15	–	nvd
Patchstack	WordPress Ultimate Post Kit Addons For Elementor plugin <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget vulnerability	28 Jun 202406:42	–	patchstack
Patchstack	WordPress Ultimate Post Kit – Addons For Elementor Plugin <= 3.11.7 is vulnerable to Cross Site Scripting (XSS)	28 Jun 202400:00	–	patchstack
RedhatCVE	CVE-2024-5662	23 May 202508:30	–	redhatcve
Vulnrichment	CVE-2024-5662 Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget	28 Jun 202408:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 24, 2024 to June 30, 2024)	3 Jul 202415:31	–	wordfence

[
  {
    "vendor": "bdthemes",
    "product": "Ultimate Post Kit Addons for Elementor",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.11.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/ultimate-post-kit/tags/3.11.5/modules/static-social-count/widgets/static-social-count.php
plugins	www.plugins.trac.wordpress.org/changeset/3106395/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/be9d977d-d7b2-4946-b107-35df176fbdf3
wordpress	www.wordpress.org/plugins/ultimate-post-kit/

08 Apr 2026 17:19Current

CVSS 3.16.4

EPSS0.004

CWE-79