wpmet Vulnerabilities and Affected Products
Vulnerabilities associated with ElementsKit Elementor addons.
Products
Clear product- ElementsKit Pro8 vulnerabilities
- Wp Ultimate Review6 vulnerabilities
- elements_kit_elementor_addons5 vulnerabilities
- MetForm Pro4 vulnerabilities
- ElementsKit Elementor addons Lite2 vulnerabilities
- metform_elementor_contact_form_builder2 vulnerabilities
- wp_fundraising_donation_and_crowdfunding_platform2 vulnerabilities
- wp_ultimate_review2 vulnerabilities
- Elements kit Elementor addons1 vulnerability
- Elements Kit Lite1 vulnerability
- Elements Kit Pro1 vulnerability
- ElementsKit Elementor addons1 vulnerability
- GetGenie1 vulnerability
- gutenkit1 vulnerability
- ShopEngine1 vulnerability
- WP Fundraising Donation and Crowdfunding Platform1 vulnerability
- Wp Social Login and Register Social Counter1 vulnerability
- wp_social_login_and_register_social_counter1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-6455MEDIUM | ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content FunctionThe ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capability checks on ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, pending and private items. | CVSS5.3v3.1 | EPSS0.396% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |