All products

news-kit-elementor-addons

WordPress · Plugin
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
News Kit Addons For Elementor <= 1.5.0 - Authenticated (Subscriber+) PHP Object InjectionCVE-2026-118073 news-kit-elementor-addons WordPress High No fix reported
News Kit Addons For Elementor <= 1.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via nekit_update_mega_menu_form AJAX ActionCVE-2026-120524 news-kit-elementor-addons WordPress Medium Fix reported
News Kit Addons For Elementor <= 1.4.7 - Missing AuthorizationCVE-2026-97353 news-kit-elementor-addons WordPress Medium No fix reported
News Kit Addons For Elementor <= 1.4.8 - Missing AuthorizationCVE-2026-97352 news-kit-elementor-addons WordPress Medium Fix reported
News Kit Elementor Addons <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-32196 news-kit-elementor-addons WordPress Medium No fix reported
News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box WidgetsCVE-2026-11390 news-kit-elementor-addons WordPress Medium Fix reported
News Kit Elementor Addons <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-54260 news-kit-elementor-addons WordPress Medium Fix reported
News Kit Addons For Elementor <= 1.4.2 - Missing AuthorizationCVE-2026-25416 news-kit-elementor-addons WordPress Medium Fix reported
News Kit Elementor Addons <= 1.3.4 - Missing AuthorizationCVE-2025-54037 news-kit-elementor-addons WordPress Medium Fix reported
News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor TemplateCVE-2024-9541 news-kit-elementor-addons WordPress Medium Fix reported