shamsbd71
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| All-in-One Addons for Elementor – WidgetKit | 4 | – | Dec 13, 2025 |
Exploited and recent CVEs
- CVE-2025-8779 All-in-One Addons for Elementor – WidgetKit <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team and Countdown Widgets 0.2%
- CVE-2025-2330 All-in-One Addons for Elementor – WidgetKit <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via button+modal Widget 0.3%
- CVE-2024-10321 All-in-One Addons for Elementor – WidgetKit <= 2.5.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates 0.3%
- CVE-2024-2137 All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets 0.3%