WordPress Style Kits plugin has an access control vulnerability

The WordPress Style Kits plugin is a plugin designed to extend the ability to control theme styles for Elementor page builders. The WordPress Style Kits plugin has an access control vulnerability; this vulnerability stems from improper access control measures. Attackers can exploit this...

EUVD-2026-65160

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-27364

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-27364 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-27364

Broken Access Control vulnerability in the WordPress Style Kits plugin (AnalogWP) versions ≤ 2.6.5 . A Subscriber -level authenticated user can exploit insufficient access controls, resulting in a high impact on integrity (CVSS 3.1: 6.5 MEDIUM, vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No conf...

CVE-2026-27364 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Style Kits versions = 2.6.5...

PT-2026-81045

Name of the Vulnerable Software and Affected Versions Style Kits versions prior to 2.6.6 Description Broken Access Control allows a user with Subscriber privileges to perform unauthorized actions. Recommendations Update Style Kits to version 2.6.6 or later...

CVE-2026-65484

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-65484 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-65484

Technical details for CVE-2026-65484 are not publicly available in the provided documents; monitor for updates.

CVE-2026-65484 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

EUVD-2026-48095

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-65484

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

PT-2026-63905

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Style Kits versions = 2.6.5...

CVE-2026-6565

The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2.5.0 due to insufficient input...

CVE-2026-6565

The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2.5.0 due to insufficient input...

CVE-2026-6565 Style Kits – Advanced Theme Styles for Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title

The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2.5.0 due to insufficient input...

EUVD-2026-32037

The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2.5.0 due to insufficient input...