Skip to content
OpenAdvisories

Product · AnalogWP

Style Kits for Elementor

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    Style Kits – Advanced Theme Styles for Elementor <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title

    The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2…