codesupplyco Powerkit – Supercharge your WordPress Site

• CVE-2026-2390 Medium 6.4 Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing 0.3%
• CVE-2026-15644 Medium 6.4 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute 0.4%
• CVE-2026-15649 Medium 6.4 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
• CVE-2026-15645 Medium 6.4 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute 0.4%
• CVE-2024-2458 Medium 6.4 Powerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%