Roxnor ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor

• CVE-2026-4362 Medium 6.5 ElementsKit Elementor Addons <= 3.8.2 - Missing Authorization to Unauthenticated Widget Content Overwrite 0.4%
• CVE-2026-2600 Medium 6.4 ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget 0.3%
• CVE-2026-23693 Critical 10.0 ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint 1.3%
• CVE-2025-3614 Medium 6.4 ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget 0.3%
• CVE-2025-4479 Medium 6.4 ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget 0.3%
• CVE-2024-11180 Medium 6.4 ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2025-0968 Medium 5.3 ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function 0.5%
• CVE-2025-1005 Medium 6.4 ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget 0.4%
• CVE-2024-10091 Medium 6.4 ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget 0.3%
• CVE-2024-8546 Medium 6.4 ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget 0.4%
• CVE-2024-6455 Medium 5.3 ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function 0.4%
• CVE-2024-3499 High 8.8 ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module 1.1%
• CVE-2024-2803 Medium 6.4 ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget 0.3%
• CVE-2024-1238 Medium 6.4 ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-2047 High 8.8 ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw 1.5%
• CVE-2023-6525 Medium 5.5 ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-2042 Medium 6.4 ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget 0.5%
• CVE-2024-1239 Medium 6.4 ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2023-6582 Medium 5.3 ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure 0.5%