Skip to content
OpenAdvisories

Vendor

Kraft Plugins

5 known vulnerabilities.

Products

Wheel of Life 2 Mega Elements 2 Demo Importer Plus 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-25000

    WordPress Wheel of Life plugin <= 1.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through <= 1.2.0.

    Kraft Plugins Wheel of Life
  • Medium 4.3
    CVE-2025-69091

    WordPress Demo Importer Plus plugin <= 2.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Importer Plus: from n/a through <= 2.0.8.

    Kraft Plugins Demo Importer Plus
  • Medium 5.3
    CVE-2024-47311

    WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through <= 1.1.8.

    Kraft Plugins Wheel of Life
  • Medium 6.5
    CVE-2024-49693

    WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through <= 1.2.6.

    Kraft Plugins Mega Elements
  • Medium 6.5
    CVE-2024-47343

    WordPress Mega Elements – Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraft Plugins Mega Elements mega-elements-addons-for-elementor allows Stored XSS.This issue affects Mega Elements: from n/a through <= 1.2.4.

    Kraft Plugins Mega Elements