Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

52 matches found

Kitploit
Kitploit•added 2026/10/01 5:08 p.m.•15 views

CVE-2026-2600-POC

CVE-2026-2600 ElementsKit Elementor 插件 $item echo '' . $item'ekittabtitle' . ''; Elementor 编辑器会在客户端对输入进行清理，但 REST API 端点（/wp-json/wp/v2/posts/id）会直接接受 elementordata 元字段，完全绕过了这一层防护。 已认证的贡献者可以通过 PATCH 请求修改文章，注入精心构造的 Elementor JSON 载荷，将 ekittabtitle 设置为任意 HTML。由于该值会原样存储在 elementordata 中，并在渲染时未经...

6.4CVSS6.2AI score0.00261EPSS
SaveExploits1References1
NVD
NVD•added 2026/10/01 1:17 p.m.•8 views

CVE-2026-103064

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS0.0013EPSS
SaveExploits0References1
NVD
NVD•added 2026/10/01 1:17 p.m.•7 views

CVE-2026-103063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS0.0013EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/01 12:33 p.m.•5 views

EUVD-2026-90802

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/10/01 12:33 p.m.•34 views

CVE-2026-103063 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/10/01 12:33 p.m.•6 views

CVE-2026-103063 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
CVE
CVE•added 2026/10/01 12:33 p.m.•8 views

CVE-2026-103063

The ElementsKit Elementor addons Lite WordPress plugin (versions

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/10/01 12:33 p.m.•6 views

WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin ElementsKit Elementor addons Lite versions = 4.0.6...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0Affected Software1
CVE
CVE•added 2026/10/01 12:32 p.m.•13 views

CVE-2026-103064

The WordPress ElementsKit Elementor addons Lite plugin (versions ≤ 4.0.6 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the improper neutralization of input during web page generation within the elementskit-lite component. This vulnerability could allow an attacker...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/10/01 12:32 p.m.•5 views

CVE-2026-103064 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/01 12:32 p.m.•6 views

EUVD-2026-90800

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/10/01 12:32 p.m.•33 views

CVE-2026-103064 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...

6.5CVSS0.0013EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/10/01 12:32 p.m.•5 views

WordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ElementsKit Elementor addons Lite versions = 4.0.6...

6.5CVSS5.9AI score0.0013EPSS
SaveExploits0Affected Software1
NVD
NVD•added 2026/09/23 7:19 p.m.•8 views

CVE-2026-94500

Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...

6.5CVSS0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/23 6:14 p.m.•45 views

CVE-2026-94500 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...

6.5CVSS0.00171EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/23 6:14 p.m.•7 views

EUVD-2026-85482

Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...

6.5CVSS5.8AI score0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/23 6:14 p.m.•9 views

CVE-2026-94500 WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...

6.5CVSS5.8AI score0.00171EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/23 6:14 p.m.•19 views

CVE-2026-94500

The ElementsKit Elementor addons Lite WordPress plugin is vulnerable to a Contributor Cross Site Scripting (XSS) vulnerability in versions

6.5CVSS5.8AI score0.00171EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/09/23 2:08 p.m.•19 views

WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin ElementsKit Elementor addons Lite versions = 4.0.5...

6.5CVSS5.9AI score0.00171EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/23 12:00 a.m.•9 views

CVE-2026-94500: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in ElementsKit Elementor addons Lite = 4.0.5 versions...

6.5CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Rows per page
Query Builder