What’s Vulnerable › Products

DethemeKit For Elementor vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your DethemeKit For Elementor version is affected

Latest DethemeKit For Elementor vulnerabilities

• CVE-2025-57995 — WordPress DethemeKit For Elementor Plugin <= 2.1.10 - Broken Access Control Vulnerability (CVSS 4.3)
• CVE-2025-32260 — WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-1526 — DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2025-26772 — WordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2025-0661 — DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure (CVSS 4.3)
• CVE-2024-13644 — DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget (CVSS 5.4)
• CVE-2024-47632 — WordPress DethemeKit For Elementor plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-6283 — DethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget (CVSS 5.4)
• CVE-2024-5418 — DethemeKit For Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attribute (CVSS 5.4)
• CVE-2024-4374 — DethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 5.4)
• CVE-2024-34575 — WordPress DethemeKit For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-32508 — WordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2021-24270 — DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS (CVSS 5.4)