Kraft Plugins

Products

ProductCVEsExploitedLatest
Mega Elements2–Oct 24, 2024
Wheel of Life2–Feb 19, 2026
Demo Importer Plus1–Dec 30, 2025

Exploited and recent CVEs

  • CVE-2026-25000 Medium 5.3 WordPress Wheel of Life plugin <= 1.2.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-69091 Medium 4.3 WordPress Demo Importer Plus plugin <= 2.0.8 - Broken Access Control vulnerability 0.2%
  • CVE-2024-47311 Medium 5.3 WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability 0.4%
  • CVE-2024-49693 Medium 6.5 WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-47343 Medium 6.5 WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability 0.3%