CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

373 matches found

attackerkb•added 2026/02/23 8:33 p.m.•11 views

CVE-2026-23693

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor elementskit-lite WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoint accepts client-supplied Mailchimp API...

10CVSS5.9AI score0.01242EPSS

SaveExploits0References4

Cvelist•added 2026/02/23 8:33 p.m.•102 views

CVE-2026-23693 ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint

10CVSS0.01242EPSS

SaveExploits0References3

Positive Technologies•added 2026/02/23 12:00 a.m.•52 views

PT-2026-21554

Name of the Vulnerable Software and Affected Versions ElementsKit Lite WordPress plugin versions prior to 3.7.9 Description The ElementsKit Lite WordPress plugin versions prior to 3.7.9 exposes the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoi...

10CVSS5.3AI score0.01242EPSS

SaveExploits0References15

Rapid7 Vulnerability Database (full)•added 2026/02/23 12:00 a.m.•11 views

CVE-2026-23693: Missing Authentication for Critical Function

10CVSS5.8AI score0.01242EPSS

SaveExploits0References1

CNNVD•added 2026/02/23 12:00 a.m.•30 views

WordPress plugin ElementsKit Lite has a access control error vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

10CVSS5.9AI score0.01242EPSS

SaveExploits0References3

RedhatCVE•added 2026/01/07 9:14 a.m.•34 views

CVE-2024-2803

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS8.5AI score0.00343EPSS

SaveExploits0References1