wpmet Vulnerabilities and Affected Products
Vulnerabilities associated with Elements Kit Pro.
Products
Clear product- ElementsKit Pro8 vulnerabilities
- Wp Ultimate Review6 vulnerabilities
- elements_kit_elementor_addons5 vulnerabilities
- MetForm Pro4 vulnerabilities
- ElementsKit Elementor addons Lite2 vulnerabilities
- metform_elementor_contact_form_builder2 vulnerabilities
- wp_fundraising_donation_and_crowdfunding_platform2 vulnerabilities
- wp_ultimate_review2 vulnerabilities
- Elements kit Elementor addons1 vulnerability
- Elements Kit Lite1 vulnerability
- Elements Kit Pro1 vulnerability
- ElementsKit Elementor addons1 vulnerability
- GetGenie1 vulnerability
- gutenkit1 vulnerability
- ShopEngine1 vulnerability
- WP Fundraising Donation and Crowdfunding Platform1 vulnerability
- Wp Social Login and Register Social Counter1 vulnerability
- wp_social_login_and_register_social_counter1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-24258MEDIUM | ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSSThe Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. CWE-79May 5, 2021 | CVSS5.4v3.1 | EPSS0.626% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |