shamsbd71

Products

ProductCVEsExploitedLatest
All-in-One Addons for Elementor – WidgetKit4–Dec 13, 2025

Exploited and recent CVEs

  • CVE-2025-8779 Medium 6.4 All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets 0.2%
  • CVE-2025-2330 Medium 6.4 All-in-One Addons for Elementor – WidgetKit <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget 0.3%
  • CVE-2024-10321 Medium 4.3 All-in-One Addons for Elementor – WidgetKit <= 2.5.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates 0.3%
  • CVE-2024-2137 Medium 6.4 All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets 0.3%