CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

285 matches found

Patchstack•added 2026/02/24 12:9 p.m.•6 views

WordPress ElementsKit Lite plugin < 3.7.9 - Unauthenticated Mailchimp REST Endpoint vulnerability

Unauthenticated Mailchimp REST Endpoint vulnerability discovered by Rahul Karne in WordPress Plugin ElementsKit Elementor addons Lite versions 3.7.9...

10CVSS5.3AI score0.00198EPSS

Exploits0References1Affected Software1

NVD•added 2026/02/23 9:19 p.m.•5 views

CVE-2026-23693

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor elementskit-lite WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoint accepts client-supplied Mailchimp API...

10CVSS0.00198EPSS

Exploits0References3

ATTACKERKB•added 2026/02/23 8:33 p.m.•3 views

CVE-2026-23693

10CVSS5.9AI score0.00198EPSS

Exploits0References4

CVE•added 2026/02/23 8:33 p.m.•16 views

CVE-2026-23693

ElementsKit Lite (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose an unauthenticated REST endpoint at /wp-json/elementskit/v1/widget/mailchimp/subscribe. The endpoint accepts client-supplied Mailchimp credentials and inadequately validates parameters (including the list) when co...

10CVSS5.5AI score0.00198EPSS

Exploits0References3

Vulnrichment•added 2026/02/23 8:33 p.m.•4 views

CVE-2026-23693 ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint

10CVSS5.5AI score0.00198EPSS

Exploits0References3

Cvelist•added 2026/02/23 8:33 p.m.•30 views

CVE-2026-23693 ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint

10CVSS0.00198EPSS

Exploits0References3

CNNVD•added 2026/02/23 12:0 a.m.•3 views

WordPress plugin ElementsKit Lite 访问控制错误漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

10CVSS5.8AI score0.00198EPSS

Exploits0References3

Positive Technologies•added 2026/02/23 12:0 a.m.•6 views

PT-2026-21554

Name of the Vulnerable Software and Affected Versions ElementsKit Lite WordPress plugin versions prior to 3.7.9 Description The ElementsKit Lite WordPress plugin versions prior to 3.7.9 exposes the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoi...

10CVSS5.3AI score0.00198EPSS

Exploits0References12

RedhatCVE•added 2026/01/07 9:14 a.m.•18 views

CVE-2024-2803

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00168EPSS

Exploits0References1