WPMet ElementsKit Pro

• CVE-2026-4246 Medium 6.1 ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter 0.4%
• CVE-2025-0321 Medium 6.4 ElementsKit Pro <= 3.7.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via url Parameter 0.3%
• CVE-2024-7063 Medium 4.3 ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure 0.4%
• CVE-2024-7064 Medium 6.4 ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-5263 Medium 6.4 ElementsKit Elementor addons and Templates Library <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Motion Text and Table Widgets 0.3%
• CVE-2024-4404 High 8.5 ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery 0.3%
• CVE-2024-4452 Medium 6.4 ElementsKit Pro <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-3500 High 8.8 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets 1.1%
• CVE-2024-3598 Medium 6.4 ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ekit_btn_id' 0.3%