What’s Vulnerable › Products

blazethemes News Kit Elementor Addons vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your blazethemes News Kit Elementor Addons version is affected

Latest blazethemes News Kit Elementor Addons vulnerabilities

• CVE-2026-118073 — WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2026-11390 — News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets (CVSS 6.4)
• CVE-2026-25416 — WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-54037 — WordPress News Kit Elementor Addons plugin <= 1.3.4 - Broken Access Control Vulnerability (CVSS 5.4)
• CVE-2025-32196 — WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-54260 — WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-9541 — News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template (CVSS 4.3)