2 matches found
PT-2025-7480
Name of the Vulnerable Software and Affected Versions ElementsKit Elementor addons plugin for WordPress version 3.4.0 and earlier Description The issue allows unauthenticated attackers to view any item created in Elementor, such as posts, pages, and templates, including drafts, trashed, and priva...
5.3CVSS8.3AI score0.00489EPSS
SaveExploits0References11
PT-2024-27034
Name of the Vulnerable Software and Affected Versions ElementsKit Elementor addons plugin for WordPress versions 3.0.7 through 3.1.2 Description The issue is related to Stored Cross-Site Scripting via the Image Accordion widget due to insufficient input sanitization and output escaping. This allo...
6.4CVSS0.00423EPSS
SaveExploits0References6
20