Log in Start free

Themesgrove

Products

ProductCVEsExploitedLatest
WidgetKit3–Jul 22, 2024
Download Manager and Payment Form WordPress Plugin – WP SmartPay1–May 7, 2025
Onepage Builder1–Nov 3, 2023
WidgetKit Pro1–Jan 7, 2026

Exploited and recent CVEs

  • CVE-2025-46494 High 7.1 WordPress WidgetKit Pro plugin <= 1.13.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-3851 Medium 4.3 Download Manager and Payment Form WordPress Plugin – WP SmartPay 1.1.0 - 2.7.13 - Authenticated (Subscriber+) Information Exposure 0.3%
  • CVE-2024-37428 Medium 6.5 WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34548 Medium 6.5 WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-33908 Medium 5.3 WordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerability 0.4%
  • CVE-2023-38391 Medium 6.7 WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection 0.7%