Advisories · Technology
blazethemes News Kit Addons For Elementor.
Every CVE that names blazethemes News Kit Addons For Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action
- blazethemes News Kit Addons For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets
- blazethemes News Kit Addons For Elementor
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template
- blazethemes News Kit Addons For Elementor
- Information disclosure