WordPress security by component
ElementsKit Elementor addons Lite
Plugin description
ElementsKit Elementor addons Lite is a WordPress component with 17 published CVE records in this archive. The latest tracked vulnerability was published May 27, 2026; the highest CVE/CNA score is 9.3.
Plugin slug:
elementskit-liteLatest vulnerability
CVE-2026-49053: ElementsKit Elementor addons Lite: A security weakness
ElementsKit Elementor addons Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.9.6.
| Safe version |
|
||
|---|---|---|---|
| May 27, 2026 |
CVE-2026-49053
ElementsKit Elementor addons Lite: A security weakness
ElementsKit Elementor addons Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.9.6.
|
> 3.9.6 |
CVE5.3
NVDPending
|
| May 27, 2026 |
CVE-2026-49052
ElementsKit Elementor addons Lite: A security weakness
ElementsKit Elementor addons Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.9.6.
|
> 3.9.6 |
CVE4.3
NVDPending
|
| May 05, 2026 |
CVE-2026-4362
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor: A security weakness
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.8.2.
|
> 3.8.2 |
CVE6.5
NVDPending
|
| Feb 23, 2026 |
CVE-2026-23693
Elementskit Lite: A security weakness
Elementskit Lite is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE9.3
NVDPending
|
| Jul 24, 2025 |
CVE-2025-3614
ElementsKit Elementor Addons and Templates: Cross-site scripting
ElementsKit Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Jun 19, 2025 |
CVE-2025-4479
ElementsKit Elementor Addons and Templates: Cross-site scripting
ElementsKit Elementor Addons and Templates is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Feb 19, 2025 |
CVE-2025-0968
ElementsKit Elementor addons: Sensitive information exposure
ElementsKit Elementor addons is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Feb 15, 2025 |
CVE-2025-1005
ElementsKit Elementor addons: Cross-site scripting
ElementsKit Elementor addons is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Oct 26, 2024 |
CVE-2024-10091
ElementsKit Elementor addons: Cross-site scripting
ElementsKit Elementor addons is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Sep 25, 2024 |
CVE-2024-8546
ElementsKit Elementor addons: Cross-site scripting
ElementsKit Elementor addons is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Jul 18, 2024 |
CVE-2024-6455
ElementsKit Elementor addons: A security weakness
ElementsKit Elementor addons is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Jun 19, 2024 |
CVE-2023-39993
Elements kit Elementor addons: A security weakness
Elements kit Elementor addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVD4.3
|
| Apr 17, 2024 |
CVE-2024-32505
ElementsKit Elementor addons Lite: Cross-site scripting
ElementsKit Elementor addons Lite is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Mar 30, 2024 |
CVE-2024-2047
ElementsKit Elementor addons: Filesystem traversal
ElementsKit Elementor addons is affected by filesystem traversal. Exploitation requires at least contributor-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Mar 16, 2024 |
CVE-2024-2042
ElementsKit Elementor addons: Cross-site scripting
ElementsKit Elementor addons is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Mar 16, 2024 |
CVE-2023-6525
ElementsKit Elementor addons: Cross-site scripting
ElementsKit Elementor addons is affected by cross-site scripting. Exploitation requires at least editor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.5
NVD4.8
|
| Jan 11, 2024 |
CVE-2023-6582
ElementsKit Elementor addons: Sensitive information exposure
ElementsKit Elementor addons is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVD5.3
|