Vendor
AnalogWP
4 known vulnerabilities.
Products
3 results · Clear filters · Feed
-
Medium 6.5
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.
-
Medium 6.3
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
-
Medium 6.4
Style Kits – Advanced Theme Styles for Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title
The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2…