WordPress security by component
Ultimate Store Kit Elementor Addons
Plugin description
Ultimate Store Kit Elementor Addons is a WordPress component with 14 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
ultimate-store-kitLatest vulnerability
CVE-2026-65505: Ultimate Store Kit Elementor Addons: A security weakness
Ultimate Store Kit Elementor Addons is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.0.5.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-65505
Ultimate Store Kit Elementor Addons: A security weakness
Ultimate Store Kit Elementor Addons is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 3.0.5.
|
3.0.7 |
CVE5.3
NVDPending
|
| Jul 23, 2026 |
CVE-2026-65503
Ultimate Store Kit Elementor Addons: Cross-site scripting
Ultimate Store Kit Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 3.0.5.
|
3.0.7 |
CVE6.5
NVDPending
|
| Jan 06, 2026 |
CVE-2025-69336
Ultimate Store Kit Elementor Addons: A security weakness
Ultimate Store Kit Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Sep 22, 2025 |
CVE-2025-58017
Ultimate Store Kit Elementor Addons: Cross-site scripting
Ultimate Store Kit Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| May 01, 2025 |
CVE-2025-2168
Ultimate Store Kit: Cross-site request forgery
Ultimate Store Kit is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Apr 17, 2025 |
CVE-2025-39588
Ultimate Store Kit Elementor Addons: Code execution
Ultimate Store Kit Elementor Addons is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Apr 04, 2025 |
CVE-2025-32184
Ultimate Store Kit Elementor Addons: Cross-site scripting
Ultimate Store Kit Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Jan 27, 2025 |
CVE-2025-24584
Ultimate Store Kit Elementor Addons: A security weakness
Ultimate Store Kit Elementor Addons is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 05, 2024 |
CVE-2024-47629
Ultimate Store Kit Elementor Addons: Cross-site scripting
Ultimate Store Kit Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Aug 28, 2024 |
CVE-2024-8030
Ultimate Store Kit: Code execution
Ultimate Store Kit is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Aug 21, 2024 |
CVE-2024-5335
Ultimate Store Kit: Code execution
Ultimate Store Kit is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Aug 18, 2024 |
CVE-2024-43342
Ultimate Store Kit Elementor Addons: Cross-site scripting
Ultimate Store Kit Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| May 14, 2024 |
CVE-2024-4606
Ultimate Store Kit Elementor Addons: Code execution
Ultimate Store Kit Elementor Addons is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Apr 08, 2024 |
CVE-2024-31357
Ultimate Store Kit Elementor Addons: Cross-site scripting
Ultimate Store Kit Elementor Addons is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|