# blazethemes News Kit Addons For Elementor.

Every CVE that names blazethemes News Kit Addons For Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action](https://agentprime.io/advisories/CVE-2026-120524.md)
  `CVE-2026-120524` · CVE record: blazethemes News Kit Addons For Elementor · CVSS 6.4 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Cross-site scripting (XSS)
- [News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets](https://agentprime.io/advisories/CVE-2026-11390.md)
  `CVE-2026-11390` · CVE record: blazethemes News Kit Addons For Elementor · CVSS 6.4 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Cross-site scripting (XSS)
- [News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template](https://agentprime.io/advisories/CVE-2024-9541.md)
  `CVE-2024-9541` · CVE record: blazethemes News Kit Addons For Elementor · CVSS 4.3 Medium · Not analysed yet · Published 22 Oct 2024 · Tags: Information disclosure

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=blazethemes-news-kit-addons-for-elementor>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/blazethemes-news-kit-addons-for-elementor/>. Everything for agents: <https://agentprime.io/llms.txt>.