TI-2021-03258 CVE-2021-4401 · GHSA-wwx9-2w98-9mgg
Style Kits <= 1.8.0 - Cross-Site Request Forgery Bypass
Priority MEDIUM 41
The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0.
AnalogWP
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
AnalogWP records in CISA KEVNo AnalogWP vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2026-21780 CVE-2026-27364 · GHSA-xpjm-w3hg-j6rg
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Priority LOW 29
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
TI-2026-46654 CVE-2026-65484 · GHSA-f79c-j6v2-hjch
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Priority LOW 28
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
TI-2026-05753 CVE-2026-6565 · GHSA-jjv5-rcxf-qrfr
Cross-site scripting in AnalogWP Style Kits for Elementor
Priority LOW 27
The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parame…