TI-2025-31189 CVE-2025-49074 · GHSA-6g64-jqg9-j3wf
WordPress WidgetKit plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Abu Huraira Bin Aman WidgetKit widgetkit-for-elementor allows Stored XSS.This issue affects WidgetKit: from n/a throug…