What’s Vulnerable › Products

shamsbd71 All-in-One Addons for Elementor – WidgetKit vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your shamsbd71 All-in-One Addons for Elementor – WidgetKit version is affected

Latest shamsbd71 All-in-One Addons for Elementor – WidgetKit vulnerabilities

• CVE-2025-8779 — All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets (CVSS 6.4)
• CVE-2025-2330 — All-in-One Addons for Elementor – WidgetKit <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget (CVSS 5.4)
• CVE-2024-10321 — All-in-One Addons for Elementor – WidgetKit <= 2.5.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates (CVSS 4.3)
• CVE-2024-37428 — WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-2137 — All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets (CVSS 5.4)
• CVE-2022-4256 — All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2021-24267 — All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS (CVSS 5.4)