Skip to content
OpenAdvisories

Product · Wpmet

ElementsKit Pro

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2024-4404

    ElementsKit PRO <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery

    The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function. This can allow authenticated attackers, with contributor-level permissions and above, to make web requ…

    Wpmet ElementsKit Pro Web / CMS
  • High 8.8
    CVE-2024-3500

    ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Widgets

    The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it possible for authenticated attackers, with contributor-level acc…

    Wpmet ElementsKit Pro Web / CMS