What’s Vulnerable › Products

wpmet ElementsKit Pro vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your wpmet ElementsKit Pro version is affected

Latest wpmet ElementsKit Pro vulnerabilities

• CVE-2026-4246 — ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter (CVSS 6.1)
• CVE-2025-0321 — ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter (CVSS 5.4)
• CVE-2024-43996 — WordPress ElementsKit Pro plugin <= 3.6.0 - Local File Inclusion vulnerability (CVSS 6.5)
• CVE-2024-7064 — ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-7063 — ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 4.3)
• CVE-2024-5263 — ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets (CVSS 5.4)
• CVE-2024-4404 — ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery (CVSS 9.6)
• CVE-2024-4452 — ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-3500 — ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets (CVSS 8.8)
• CVE-2024-3598 — ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' (CVSS 5.4)