Advisories · Technology
ElementsKit Elementor Addons.
Every CVE that names ElementsKit Elementor Addons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.5 Low
ElementsKit Lite < 3.10.01 - Subsite Administrator+ Stored XSS via Megamenu Menu-Item Settings (Multisite)
- ElementsKit Elementor Addons
- Cross-site scripting (XSS)
- CVSS 7.2 High
ElementsKit Lite < 3.10.01 - Subsite Administrator+ PHP Code Injection via Custom Widget Builder (Multisite)
- ElementsKit Elementor Addons
- Code injection