Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ElementsKit Elementor Addons 3.10.01 Clear all filters
TI-2026-11345 CVE-2026-13393 · GHSA-5fj7-xcmr-5r75

ElementsKit Lite < 3.10.01 - Subsite Administrator+ Stored XSS via Megamenu Menu-Item Settings (Multisite)

Priority MEDIUM 52

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the front end, and does not require the unfilter…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00242 Published 2026-07-31 Fixed in 3.10.01 CWE-79
TI-2026-11344 CVE-2026-13392 · GHSA-v7rm-2jj2-cc35

ElementsKit Lite < 3.10.01 - Subsite Administrator+ PHP Code Injection via Custom Widget Builder (Multisite)

Priority LOW 35

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with administrative capabilities from being written verbatim into a generated PHP file that the…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00665 Published 2026-07-31 Fixed in 3.10.01 CWE-94