blazethemes News Kit Addons For Elementor

• CVE-2026-120524 Medium 6.4 News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX Action 0.2%
• CVE-2026-11390 Medium 6.4 News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box Widgets 0.4%
• CVE-2024-9541 Medium 4.3 News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template 0.3%