Skip to content
OpenAdvisories

Vendor

AnalogWP

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.5

    WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.

  • Medium 6.3

    WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

    Contributor Broken Access Control in Style Kits <= 2.6.5 versions.

  • Medium 6.4

    Style Kits – Advanced Theme Styles for Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title

    The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2…