ElementsKit Elementor Addons and Templates

A missing authorization check in the Dynamic Content Editor REST endpoint allowed any authenticated user with Contributor-level access or above to create ElementsKit dynamic content posts and open the Elementor editor for content owned by other users. Low-privileged accounts could therefore add and modify site content they should not have access to.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 1.2.6
• ElementsKit Elementor Addons and Templates 1.2.7
• ElementsKit Elementor Addons and Templates 1.2.9
• ElementsKit Elementor Addons and Templates 1.3.1
• ElementsKit Elementor Addons and Templates 1.3.2
• ElementsKit Elementor Addons and Templates 1.3.3
• ElementsKit Elementor Addons and Templates 1.3.4
• ElementsKit Elementor Addons and Templates 1.3.5
• ElementsKit Elementor Addons and Templates 1.3.8
• ElementsKit Elementor Addons and Templates 1.3.9
• ElementsKit Elementor Addons and Templates 1.4.0
• ElementsKit Elementor Addons and Templates 1.4.1
• ElementsKit Elementor Addons and Templates 1.4.2
• ElementsKit Elementor Addons and Templates 1.4.3
• ElementsKit Elementor Addons and Templates 1.4.4
• ElementsKit Elementor Addons and Templates 1.4.5
• ElementsKit Elementor Addons and Templates 1.4.7
• ElementsKit Elementor Addons and Templates 1.4.8
• ElementsKit Elementor Addons and Templates 1.4.9
• ElementsKit Elementor Addons and Templates 1.5.0
• ElementsKit Elementor Addons and Templates 1.5.1
• ElementsKit Elementor Addons and Templates 1.5.2
• ElementsKit Elementor Addons and Templates 1.5.4
• ElementsKit Elementor Addons and Templates 1.5.5
• ElementsKit Elementor Addons and Templates 1.5.6
• ElementsKit Elementor Addons and Templates 1.5.7
• ElementsKit Elementor Addons and Templates 1.5.8
• ElementsKit Elementor Addons and Templates 1.5.9
• ElementsKit Elementor Addons and Templates 1.5.10
• ElementsKit Elementor Addons and Templates 1.5.11
• ElementsKit Elementor Addons and Templates 1.5.12
• ElementsKit Elementor Addons and Templates 2.0.0
• ElementsKit Elementor Addons and Templates 2.0.1
• ElementsKit Elementor Addons and Templates 2.0.2
• ElementsKit Elementor Addons and Templates 2.0.3
• ElementsKit Elementor Addons and Templates 2.0.4
• ElementsKit Elementor Addons and Templates 2.0.5
• ElementsKit Elementor Addons and Templates 2.0.6
• ElementsKit Elementor Addons and Templates 2.0.7
• ElementsKit Elementor Addons and Templates 2.0.8
• ElementsKit Elementor Addons and Templates 2.0.9
• ElementsKit Elementor Addons and Templates 2.0.9.1
• ElementsKit Elementor Addons and Templates 2.0.9.2
• ElementsKit Elementor Addons and Templates 2.0.9.3
• ElementsKit Elementor Addons and Templates 2.0.10
• ElementsKit Elementor Addons and Templates 2.0.11
• ElementsKit Elementor Addons and Templates 2.0.12
• ElementsKit Elementor Addons and Templates 2.0.13
• ElementsKit Elementor Addons and Templates 2.1.0
• ElementsKit Elementor Addons and Templates 2.1.1
• ElementsKit Elementor Addons and Templates 2.1.2
• ElementsKit Elementor Addons and Templates 2.1.3
• ElementsKit Elementor Addons and Templates 2.1.4
• ElementsKit Elementor Addons and Templates 2.1.5
• ElementsKit Elementor Addons and Templates 2.1.6
• ElementsKit Elementor Addons and Templates 2.1.7
• ElementsKit Elementor Addons and Templates 2.2.0
• ElementsKit Elementor Addons and Templates 2.2.1
• ElementsKit Elementor Addons and Templates 2.2.2
• ElementsKit Elementor Addons and Templates 2.2.3
• ElementsKit Elementor Addons and Templates 2.2.4
• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9
• ElementsKit Elementor Addons and Templates 3.3.0
• ElementsKit Elementor Addons and Templates 3.3.1
• ElementsKit Elementor Addons and Templates 3.3.2
• ElementsKit Elementor Addons and Templates 3.3.3
• ElementsKit Elementor Addons and Templates 3.3.4
• ElementsKit Elementor Addons and Templates 3.3.5
• ElementsKit Elementor Addons and Templates 3.3.6
• ElementsKit Elementor Addons and Templates 3.3.7
• ElementsKit Elementor Addons and Templates 3.3.8
• ElementsKit Elementor Addons and Templates 3.3.9
• ElementsKit Elementor Addons and Templates 3.4.0
• ElementsKit Elementor Addons and Templates 3.4.1
• ElementsKit Elementor Addons and Templates 3.4.2
• ElementsKit Elementor Addons and Templates 3.4.3
• ElementsKit Elementor Addons and Templates 3.4.4
• ElementsKit Elementor Addons and Templates 3.4.5
• ElementsKit Elementor Addons and Templates 3.4.6
• ElementsKit Elementor Addons and Templates 3.4.7
• ElementsKit Elementor Addons and Templates 3.4.8
• ElementsKit Elementor Addons and Templates 3.4.9
• ElementsKit Elementor Addons and Templates 3.5.0
• ElementsKit Elementor Addons and Templates 3.5.1
• ElementsKit Elementor Addons and Templates 3.5.2
• ElementsKit Elementor Addons and Templates 3.5.3
• ElementsKit Elementor Addons and Templates 3.5.4
• ElementsKit Elementor Addons and Templates 3.5.5
• ElementsKit Elementor Addons and Templates 3.5.6
• ElementsKit Elementor Addons and Templates 3.6.0
• ElementsKit Elementor Addons and Templates 3.6.1
• ElementsKit Elementor Addons and Templates 3.7.0
• ElementsKit Elementor Addons and Templates 3.7.1
• ElementsKit Elementor Addons and Templates 3.7.2
• ElementsKit Elementor Addons and Templates 3.7.3
• ElementsKit Elementor Addons and Templates 3.7.4
• ElementsKit Elementor Addons and Templates 3.7.5
• ElementsKit Elementor Addons and Templates 3.7.6
• ElementsKit Elementor Addons and Templates 3.7.7
• ElementsKit Elementor Addons and Templates 3.7.8
• ElementsKit Elementor Addons and Templates 3.7.9
• ElementsKit Elementor Addons and Templates 3.8.0
• ElementsKit Elementor Addons and Templates 3.8.1
• ElementsKit Elementor Addons and Templates 3.8.2
• ElementsKit Elementor Addons and Templates 3.9.0
• ElementsKit Elementor Addons and Templates 3.9.1
• ElementsKit Elementor Addons and Templates 3.9.2
• ElementsKit Elementor Addons and Templates 3.9.3
• ElementsKit Elementor Addons and Templates 3.9.5
• ElementsKit Elementor Addons and Templates 3.9.6

An unauthenticated attacker could call the layout-list REST endpoint to retrieve layout library data, including potentially sensitive template content, without any authentication or capability check. The fix adds a current_user_can(‘edit_posts’) check that returns HTTP 403 for unauthenticated or unauthorized requests.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9
• ElementsKit Elementor Addons and Templates 3.3.0
• ElementsKit Elementor Addons and Templates 3.3.1
• ElementsKit Elementor Addons and Templates 3.3.2
• ElementsKit Elementor Addons and Templates 3.3.3
• ElementsKit Elementor Addons and Templates 3.3.4
• ElementsKit Elementor Addons and Templates 3.3.5
• ElementsKit Elementor Addons and Templates 3.3.6
• ElementsKit Elementor Addons and Templates 3.3.7
• ElementsKit Elementor Addons and Templates 3.3.8
• ElementsKit Elementor Addons and Templates 3.3.9
• ElementsKit Elementor Addons and Templates 3.4.0
• ElementsKit Elementor Addons and Templates 3.4.1
• ElementsKit Elementor Addons and Templates 3.4.2
• ElementsKit Elementor Addons and Templates 3.4.3
• ElementsKit Elementor Addons and Templates 3.4.4
• ElementsKit Elementor Addons and Templates 3.4.5
• ElementsKit Elementor Addons and Templates 3.4.6
• ElementsKit Elementor Addons and Templates 3.4.7
• ElementsKit Elementor Addons and Templates 3.4.8
• ElementsKit Elementor Addons and Templates 3.4.9
• ElementsKit Elementor Addons and Templates 3.5.0
• ElementsKit Elementor Addons and Templates 3.5.1
• ElementsKit Elementor Addons and Templates 3.5.2
• ElementsKit Elementor Addons and Templates 3.5.3
• ElementsKit Elementor Addons and Templates 3.5.4
• ElementsKit Elementor Addons and Templates 3.5.5
• ElementsKit Elementor Addons and Templates 3.5.6
• ElementsKit Elementor Addons and Templates 3.6.0
• ElementsKit Elementor Addons and Templates 3.6.1
• ElementsKit Elementor Addons and Templates 3.7.0
• ElementsKit Elementor Addons and Templates 3.7.1
• ElementsKit Elementor Addons and Templates 3.7.2
• ElementsKit Elementor Addons and Templates 3.7.3
• ElementsKit Elementor Addons and Templates 3.7.4
• ElementsKit Elementor Addons and Templates 3.7.5
• ElementsKit Elementor Addons and Templates 3.7.6
• ElementsKit Elementor Addons and Templates 3.7.7
• ElementsKit Elementor Addons and Templates 3.7.8
• ElementsKit Elementor Addons and Templates 3.7.9
• ElementsKit Elementor Addons and Templates 3.8.0
• ElementsKit Elementor Addons and Templates 3.8.1
• ElementsKit Elementor Addons and Templates 3.8.2
• ElementsKit Elementor Addons and Templates 3.9.0
• ElementsKit Elementor Addons and Templates 3.9.1
• ElementsKit Elementor Addons and Templates 3.9.2
• ElementsKit Elementor Addons and Templates 3.9.3
• ElementsKit Elementor Addons and Templates 3.9.5
• ElementsKit Elementor Addons and Templates 3.9.6

Improved the output escaping in widget-writer so that widget settings are properly sanitized before being rendered on the page. This prevents potential cross-site scripting (XSS) issues from malicious or unexpected widget content and makes custom widgets safer for site visitors.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 1.5.7
• ElementsKit Elementor Addons and Templates 1.5.8
• ElementsKit Elementor Addons and Templates 1.5.9
• ElementsKit Elementor Addons and Templates 1.5.10
• ElementsKit Elementor Addons and Templates 1.5.11
• ElementsKit Elementor Addons and Templates 1.5.12
• ElementsKit Elementor Addons and Templates 2.0.0
• ElementsKit Elementor Addons and Templates 2.0.1
• ElementsKit Elementor Addons and Templates 2.0.2
• ElementsKit Elementor Addons and Templates 2.0.3
• ElementsKit Elementor Addons and Templates 2.0.4
• ElementsKit Elementor Addons and Templates 2.0.5
• ElementsKit Elementor Addons and Templates 2.0.6
• ElementsKit Elementor Addons and Templates 2.0.7
• ElementsKit Elementor Addons and Templates 2.0.8
• ElementsKit Elementor Addons and Templates 2.0.9
• ElementsKit Elementor Addons and Templates 2.0.9.1
• ElementsKit Elementor Addons and Templates 2.0.9.2
• ElementsKit Elementor Addons and Templates 2.0.9.3
• ElementsKit Elementor Addons and Templates 2.0.10
• ElementsKit Elementor Addons and Templates 2.0.11
• ElementsKit Elementor Addons and Templates 2.0.12
• ElementsKit Elementor Addons and Templates 2.0.13
• ElementsKit Elementor Addons and Templates 2.1.0
• ElementsKit Elementor Addons and Templates 2.1.1
• ElementsKit Elementor Addons and Templates 2.1.2
• ElementsKit Elementor Addons and Templates 2.1.3
• ElementsKit Elementor Addons and Templates 2.1.4
• ElementsKit Elementor Addons and Templates 2.1.5
• ElementsKit Elementor Addons and Templates 2.1.6
• ElementsKit Elementor Addons and Templates 2.1.7
• ElementsKit Elementor Addons and Templates 2.2.0
• ElementsKit Elementor Addons and Templates 2.2.1
• ElementsKit Elementor Addons and Templates 2.2.2
• ElementsKit Elementor Addons and Templates 2.2.3
• ElementsKit Elementor Addons and Templates 2.2.4
• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9
• ElementsKit Elementor Addons and Templates 3.3.0
• ElementsKit Elementor Addons and Templates 3.3.1
• ElementsKit Elementor Addons and Templates 3.3.2
• ElementsKit Elementor Addons and Templates 3.3.3
• ElementsKit Elementor Addons and Templates 3.3.4
• ElementsKit Elementor Addons and Templates 3.3.5
• ElementsKit Elementor Addons and Templates 3.3.6
• ElementsKit Elementor Addons and Templates 3.3.7
• ElementsKit Elementor Addons and Templates 3.3.8
• ElementsKit Elementor Addons and Templates 3.3.9
• ElementsKit Elementor Addons and Templates 3.4.0
• ElementsKit Elementor Addons and Templates 3.4.1
• ElementsKit Elementor Addons and Templates 3.4.2
• ElementsKit Elementor Addons and Templates 3.4.3
• ElementsKit Elementor Addons and Templates 3.4.4
• ElementsKit Elementor Addons and Templates 3.4.5
• ElementsKit Elementor Addons and Templates 3.4.6
• ElementsKit Elementor Addons and Templates 3.4.7
• ElementsKit Elementor Addons and Templates 3.4.8
• ElementsKit Elementor Addons and Templates 3.4.9
• ElementsKit Elementor Addons and Templates 3.5.0
• ElementsKit Elementor Addons and Templates 3.5.1
• ElementsKit Elementor Addons and Templates 3.5.2

Stored Cross-Site Scripting via the plugin image comparison widget due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 1.2.6
• ElementsKit Elementor Addons and Templates 1.2.7
• ElementsKit Elementor Addons and Templates 1.2.9
• ElementsKit Elementor Addons and Templates 1.3.1
• ElementsKit Elementor Addons and Templates 1.3.2
• ElementsKit Elementor Addons and Templates 1.3.3
• ElementsKit Elementor Addons and Templates 1.3.4
• ElementsKit Elementor Addons and Templates 1.3.5
• ElementsKit Elementor Addons and Templates 1.3.8
• ElementsKit Elementor Addons and Templates 1.3.9
• ElementsKit Elementor Addons and Templates 1.4.0
• ElementsKit Elementor Addons and Templates 1.4.1
• ElementsKit Elementor Addons and Templates 1.4.2
• ElementsKit Elementor Addons and Templates 1.4.3
• ElementsKit Elementor Addons and Templates 1.4.4
• ElementsKit Elementor Addons and Templates 1.4.5
• ElementsKit Elementor Addons and Templates 1.4.7
• ElementsKit Elementor Addons and Templates 1.4.8
• ElementsKit Elementor Addons and Templates 1.4.9
• ElementsKit Elementor Addons and Templates 1.5.0
• ElementsKit Elementor Addons and Templates 1.5.1
• ElementsKit Elementor Addons and Templates 1.5.2
• ElementsKit Elementor Addons and Templates 1.5.4
• ElementsKit Elementor Addons and Templates 1.5.5
• ElementsKit Elementor Addons and Templates 1.5.6
• ElementsKit Elementor Addons and Templates 1.5.7
• ElementsKit Elementor Addons and Templates 1.5.8
• ElementsKit Elementor Addons and Templates 1.5.9
• ElementsKit Elementor Addons and Templates 1.5.10
• ElementsKit Elementor Addons and Templates 1.5.11
• ElementsKit Elementor Addons and Templates 1.5.12
• ElementsKit Elementor Addons and Templates 2.0.0
• ElementsKit Elementor Addons and Templates 2.0.1
• ElementsKit Elementor Addons and Templates 2.0.2
• ElementsKit Elementor Addons and Templates 2.0.3
• ElementsKit Elementor Addons and Templates 2.0.4
• ElementsKit Elementor Addons and Templates 2.0.5
• ElementsKit Elementor Addons and Templates 2.0.6
• ElementsKit Elementor Addons and Templates 2.0.7
• ElementsKit Elementor Addons and Templates 2.0.8
• ElementsKit Elementor Addons and Templates 2.0.9
• ElementsKit Elementor Addons and Templates 2.0.9.1
• ElementsKit Elementor Addons and Templates 2.0.9.2
• ElementsKit Elementor Addons and Templates 2.0.9.3
• ElementsKit Elementor Addons and Templates 2.0.10
• ElementsKit Elementor Addons and Templates 2.0.11
• ElementsKit Elementor Addons and Templates 2.0.12
• ElementsKit Elementor Addons and Templates 2.0.13
• ElementsKit Elementor Addons and Templates 2.1.0
• ElementsKit Elementor Addons and Templates 2.1.1
• ElementsKit Elementor Addons and Templates 2.1.2
• ElementsKit Elementor Addons and Templates 2.1.3
• ElementsKit Elementor Addons and Templates 2.1.4
• ElementsKit Elementor Addons and Templates 2.1.5
• ElementsKit Elementor Addons and Templates 2.1.6
• ElementsKit Elementor Addons and Templates 2.1.7
• ElementsKit Elementor Addons and Templates 2.2.0
• ElementsKit Elementor Addons and Templates 2.2.1
• ElementsKit Elementor Addons and Templates 2.2.2
• ElementsKit Elementor Addons and Templates 2.2.3
• ElementsKit Elementor Addons and Templates 2.2.4
• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9
• ElementsKit Elementor Addons and Templates 3.3.0
• ElementsKit Elementor Addons and Templates 3.3.1
• ElementsKit Elementor Addons and Templates 3.3.2
• ElementsKit Elementor Addons and Templates 3.3.3
• ElementsKit Elementor Addons and Templates 3.3.4
• ElementsKit Elementor Addons and Templates 3.3.5
• ElementsKit Elementor Addons and Templates 3.3.6
• ElementsKit Elementor Addons and Templates 3.3.7
• ElementsKit Elementor Addons and Templates 3.3.8
• ElementsKit Elementor Addons and Templates 3.3.9
• ElementsKit Elementor Addons and Templates 3.4.0
• ElementsKit Elementor Addons and Templates 3.4.1
• ElementsKit Elementor Addons and Templates 3.4.2
• ElementsKit Elementor Addons and Templates 3.4.3
• ElementsKit Elementor Addons and Templates 3.4.4
• ElementsKit Elementor Addons and Templates 3.4.5
• ElementsKit Elementor Addons and Templates 3.4.6
• ElementsKit Elementor Addons and Templates 3.4.7
• ElementsKit Elementor Addons and Templates 3.4.8
• ElementsKit Elementor Addons and Templates 3.4.9
• ElementsKit Elementor Addons and Templates 3.5.0
• ElementsKit Elementor Addons and Templates 3.5.1
• ElementsKit Elementor Addons and Templates 3.5.2

Due to a missing capability checks on ekit_widgetarea_content function, unauthenticated attackers are able to view any item created in Elementor, such as posts, pages and templates including drafts, pending and private items.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0

Plugin is vulnerable due to a missing capability check on the get_content_editor() which can cause unauthorized modification of data.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 1.2.6
• ElementsKit Elementor Addons and Templates 1.2.7
• ElementsKit Elementor Addons and Templates 1.2.9
• ElementsKit Elementor Addons and Templates 1.3.1
• ElementsKit Elementor Addons and Templates 1.3.2
• ElementsKit Elementor Addons and Templates 1.3.3
• ElementsKit Elementor Addons and Templates 1.3.4
• ElementsKit Elementor Addons and Templates 1.3.5
• ElementsKit Elementor Addons and Templates 1.3.8
• ElementsKit Elementor Addons and Templates 1.3.9
• ElementsKit Elementor Addons and Templates 1.4.0
• ElementsKit Elementor Addons and Templates 1.4.1
• ElementsKit Elementor Addons and Templates 1.4.2
• ElementsKit Elementor Addons and Templates 1.4.3
• ElementsKit Elementor Addons and Templates 1.4.4
• ElementsKit Elementor Addons and Templates 1.4.5
• ElementsKit Elementor Addons and Templates 1.4.7
• ElementsKit Elementor Addons and Templates 1.4.8
• ElementsKit Elementor Addons and Templates 1.4.9
• ElementsKit Elementor Addons and Templates 1.5.0
• ElementsKit Elementor Addons and Templates 1.5.1
• ElementsKit Elementor Addons and Templates 1.5.2
• ElementsKit Elementor Addons and Templates 1.5.4
• ElementsKit Elementor Addons and Templates 1.5.5
• ElementsKit Elementor Addons and Templates 1.5.6
• ElementsKit Elementor Addons and Templates 1.5.7
• ElementsKit Elementor Addons and Templates 1.5.8
• ElementsKit Elementor Addons and Templates 1.5.9
• ElementsKit Elementor Addons and Templates 1.5.10
• ElementsKit Elementor Addons and Templates 1.5.11
• ElementsKit Elementor Addons and Templates 1.5.12
• ElementsKit Elementor Addons and Templates 2.0.0
• ElementsKit Elementor Addons and Templates 2.0.1
• ElementsKit Elementor Addons and Templates 2.0.2
• ElementsKit Elementor Addons and Templates 2.0.3
• ElementsKit Elementor Addons and Templates 2.0.4
• ElementsKit Elementor Addons and Templates 2.0.5
• ElementsKit Elementor Addons and Templates 2.0.6
• ElementsKit Elementor Addons and Templates 2.0.7
• ElementsKit Elementor Addons and Templates 2.0.8
• ElementsKit Elementor Addons and Templates 2.0.9
• ElementsKit Elementor Addons and Templates 2.0.9.1
• ElementsKit Elementor Addons and Templates 2.0.9.2
• ElementsKit Elementor Addons and Templates 2.0.9.3
• ElementsKit Elementor Addons and Templates 2.0.10
• ElementsKit Elementor Addons and Templates 2.0.11
• ElementsKit Elementor Addons and Templates 2.0.12
• ElementsKit Elementor Addons and Templates 2.0.13
• ElementsKit Elementor Addons and Templates 2.1.0
• ElementsKit Elementor Addons and Templates 2.1.1
• ElementsKit Elementor Addons and Templates 2.1.2
• ElementsKit Elementor Addons and Templates 2.1.3
• ElementsKit Elementor Addons and Templates 2.1.4
• ElementsKit Elementor Addons and Templates 2.1.5
• ElementsKit Elementor Addons and Templates 2.1.6
• ElementsKit Elementor Addons and Templates 2.1.7
• ElementsKit Elementor Addons and Templates 2.2.0
• ElementsKit Elementor Addons and Templates 2.2.1
• ElementsKit Elementor Addons and Templates 2.2.2
• ElementsKit Elementor Addons and Templates 2.2.3
• ElementsKit Elementor Addons and Templates 2.2.4
• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4

Due to insufficient input sanitization and output escaping via the Countdown Timer Widget ekit_countdown_timer_title parameter, authenticated attackers, with Contributor-level access and above, can inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 1.2.6
• ElementsKit Elementor Addons and Templates 1.2.7
• ElementsKit Elementor Addons and Templates 1.2.9
• ElementsKit Elementor Addons and Templates 1.3.1
• ElementsKit Elementor Addons and Templates 1.3.2
• ElementsKit Elementor Addons and Templates 1.3.3
• ElementsKit Elementor Addons and Templates 1.3.4
• ElementsKit Elementor Addons and Templates 1.3.5
• ElementsKit Elementor Addons and Templates 1.3.8
• ElementsKit Elementor Addons and Templates 1.3.9
• ElementsKit Elementor Addons and Templates 1.4.0
• ElementsKit Elementor Addons and Templates 1.4.1
• ElementsKit Elementor Addons and Templates 1.4.2
• ElementsKit Elementor Addons and Templates 1.4.3
• ElementsKit Elementor Addons and Templates 1.4.4
• ElementsKit Elementor Addons and Templates 1.4.5
• ElementsKit Elementor Addons and Templates 1.4.7
• ElementsKit Elementor Addons and Templates 1.4.8
• ElementsKit Elementor Addons and Templates 1.4.9
• ElementsKit Elementor Addons and Templates 1.5.0
• ElementsKit Elementor Addons and Templates 1.5.1
• ElementsKit Elementor Addons and Templates 1.5.2
• ElementsKit Elementor Addons and Templates 1.5.4
• ElementsKit Elementor Addons and Templates 1.5.5
• ElementsKit Elementor Addons and Templates 1.5.6
• ElementsKit Elementor Addons and Templates 1.5.7
• ElementsKit Elementor Addons and Templates 1.5.8
• ElementsKit Elementor Addons and Templates 1.5.9
• ElementsKit Elementor Addons and Templates 1.5.10
• ElementsKit Elementor Addons and Templates 1.5.11
• ElementsKit Elementor Addons and Templates 1.5.12
• ElementsKit Elementor Addons and Templates 2.0.0
• ElementsKit Elementor Addons and Templates 2.0.1
• ElementsKit Elementor Addons and Templates 2.0.2
• ElementsKit Elementor Addons and Templates 2.0.3
• ElementsKit Elementor Addons and Templates 2.0.4
• ElementsKit Elementor Addons and Templates 2.0.5
• ElementsKit Elementor Addons and Templates 2.0.6
• ElementsKit Elementor Addons and Templates 2.0.7
• ElementsKit Elementor Addons and Templates 2.0.8
• ElementsKit Elementor Addons and Templates 2.0.9
• ElementsKit Elementor Addons and Templates 2.0.9.1
• ElementsKit Elementor Addons and Templates 2.0.9.2
• ElementsKit Elementor Addons and Templates 2.0.9.3
• ElementsKit Elementor Addons and Templates 2.0.10
• ElementsKit Elementor Addons and Templates 2.0.11
• ElementsKit Elementor Addons and Templates 2.0.12
• ElementsKit Elementor Addons and Templates 2.0.13
• ElementsKit Elementor Addons and Templates 2.1.0
• ElementsKit Elementor Addons and Templates 2.1.1
• ElementsKit Elementor Addons and Templates 2.1.2
• ElementsKit Elementor Addons and Templates 2.1.3
• ElementsKit Elementor Addons and Templates 2.1.4
• ElementsKit Elementor Addons and Templates 2.1.5
• ElementsKit Elementor Addons and Templates 2.1.6
• ElementsKit Elementor Addons and Templates 2.1.7
• ElementsKit Elementor Addons and Templates 2.2.0
• ElementsKit Elementor Addons and Templates 2.2.1
• ElementsKit Elementor Addons and Templates 2.2.2
• ElementsKit Elementor Addons and Templates 2.2.3
• ElementsKit Elementor Addons and Templates 2.2.4
• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9
• ElementsKit Elementor Addons and Templates 3.3.0
• ElementsKit Elementor Addons and Templates 3.3.1

Due to insufficient input sanitization and output escaping on user supplied attributes. this makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7

Stored cross-site scripting via the image comparison widget due to insufficient input sanitization and output escaping on user supplied attributes. this makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 1.2.6
• ElementsKit Elementor Addons and Templates 1.2.7
• ElementsKit Elementor Addons and Templates 1.2.9
• ElementsKit Elementor Addons and Templates 1.3.1
• ElementsKit Elementor Addons and Templates 1.3.2
• ElementsKit Elementor Addons and Templates 1.3.3
• ElementsKit Elementor Addons and Templates 1.3.4
• ElementsKit Elementor Addons and Templates 1.3.5
• ElementsKit Elementor Addons and Templates 1.3.8
• ElementsKit Elementor Addons and Templates 1.3.9
• ElementsKit Elementor Addons and Templates 1.4.0
• ElementsKit Elementor Addons and Templates 1.4.1
• ElementsKit Elementor Addons and Templates 1.4.2
• ElementsKit Elementor Addons and Templates 1.4.3
• ElementsKit Elementor Addons and Templates 1.4.4
• ElementsKit Elementor Addons and Templates 1.4.5
• ElementsKit Elementor Addons and Templates 1.4.7
• ElementsKit Elementor Addons and Templates 1.4.8
• ElementsKit Elementor Addons and Templates 1.4.9
• ElementsKit Elementor Addons and Templates 1.5.0
• ElementsKit Elementor Addons and Templates 1.5.1
• ElementsKit Elementor Addons and Templates 1.5.2
• ElementsKit Elementor Addons and Templates 1.5.4
• ElementsKit Elementor Addons and Templates 1.5.5
• ElementsKit Elementor Addons and Templates 1.5.6
• ElementsKit Elementor Addons and Templates 1.5.7
• ElementsKit Elementor Addons and Templates 1.5.8
• ElementsKit Elementor Addons and Templates 1.5.9
• ElementsKit Elementor Addons and Templates 1.5.10
• ElementsKit Elementor Addons and Templates 1.5.11
• ElementsKit Elementor Addons and Templates 1.5.12
• ElementsKit Elementor Addons and Templates 2.0.0
• ElementsKit Elementor Addons and Templates 2.0.1
• ElementsKit Elementor Addons and Templates 2.0.2
• ElementsKit Elementor Addons and Templates 2.0.3
• ElementsKit Elementor Addons and Templates 2.0.4
• ElementsKit Elementor Addons and Templates 2.0.5
• ElementsKit Elementor Addons and Templates 2.0.6
• ElementsKit Elementor Addons and Templates 2.0.7
• ElementsKit Elementor Addons and Templates 2.0.8
• ElementsKit Elementor Addons and Templates 2.0.9
• ElementsKit Elementor Addons and Templates 2.0.9.1
• ElementsKit Elementor Addons and Templates 2.0.9.2
• ElementsKit Elementor Addons and Templates 2.0.9.3
• ElementsKit Elementor Addons and Templates 2.0.10
• ElementsKit Elementor Addons and Templates 2.0.11
• ElementsKit Elementor Addons and Templates 2.0.12
• ElementsKit Elementor Addons and Templates 2.0.13
• ElementsKit Elementor Addons and Templates 2.1.0
• ElementsKit Elementor Addons and Templates 2.1.1
• ElementsKit Elementor Addons and Templates 2.1.2
• ElementsKit Elementor Addons and Templates 2.1.3
• ElementsKit Elementor Addons and Templates 2.1.4
• ElementsKit Elementor Addons and Templates 2.1.5
• ElementsKit Elementor Addons and Templates 2.1.6
• ElementsKit Elementor Addons and Templates 2.1.7
• ElementsKit Elementor Addons and Templates 2.2.0
• ElementsKit Elementor Addons and Templates 2.2.1
• ElementsKit Elementor Addons and Templates 2.2.2
• ElementsKit Elementor Addons and Templates 2.2.3
• ElementsKit Elementor Addons and Templates 2.2.4
• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9

Due to a missing capability checks on the get_megamenu_content() function, unauthenticated attackers can view any item created in Elementor, such as posts, pages and templates including drafts, trashed and private items.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9
• ElementsKit Elementor Addons and Templates 3.3.0
• ElementsKit Elementor Addons and Templates 3.3.1
• ElementsKit Elementor Addons and Templates 3.3.2
• ElementsKit Elementor Addons and Templates 3.3.3
• ElementsKit Elementor Addons and Templates 3.3.4
• ElementsKit Elementor Addons and Templates 3.3.5
• ElementsKit Elementor Addons and Templates 3.3.6
• ElementsKit Elementor Addons and Templates 3.3.7
• ElementsKit Elementor Addons and Templates 3.3.8
• ElementsKit Elementor Addons and Templates 3.3.9
• ElementsKit Elementor Addons and Templates 3.4.0

Stored cross-site scripting available via the countdown timer widget ekit_countdown_timer_title parameter due to insufficient input sanitization and output escaping.

This vulnerability affects the following application versions:

• ElementsKit Elementor Addons and Templates 1.2.6
• ElementsKit Elementor Addons and Templates 1.2.7
• ElementsKit Elementor Addons and Templates 1.2.9
• ElementsKit Elementor Addons and Templates 1.3.1
• ElementsKit Elementor Addons and Templates 1.3.2
• ElementsKit Elementor Addons and Templates 1.3.3
• ElementsKit Elementor Addons and Templates 1.3.4
• ElementsKit Elementor Addons and Templates 1.3.5
• ElementsKit Elementor Addons and Templates 1.3.8
• ElementsKit Elementor Addons and Templates 1.3.9
• ElementsKit Elementor Addons and Templates 1.4.0
• ElementsKit Elementor Addons and Templates 1.4.1
• ElementsKit Elementor Addons and Templates 1.4.2
• ElementsKit Elementor Addons and Templates 1.4.3
• ElementsKit Elementor Addons and Templates 1.4.4
• ElementsKit Elementor Addons and Templates 1.4.5
• ElementsKit Elementor Addons and Templates 1.4.8
• ElementsKit Elementor Addons and Templates 1.4.9
• ElementsKit Elementor Addons and Templates 1.5.0
• ElementsKit Elementor Addons and Templates 1.5.1
• ElementsKit Elementor Addons and Templates 1.5.2
• ElementsKit Elementor Addons and Templates 1.5.4
• ElementsKit Elementor Addons and Templates 1.5.5
• ElementsKit Elementor Addons and Templates 1.5.6
• ElementsKit Elementor Addons and Templates 1.5.7
• ElementsKit Elementor Addons and Templates 1.5.8
• ElementsKit Elementor Addons and Templates 1.5.9
• ElementsKit Elementor Addons and Templates 1.5.10
• ElementsKit Elementor Addons and Templates 1.5.11
• ElementsKit Elementor Addons and Templates 1.5.12
• ElementsKit Elementor Addons and Templates 2.0.0
• ElementsKit Elementor Addons and Templates 2.0.1
• ElementsKit Elementor Addons and Templates 2.0.2
• ElementsKit Elementor Addons and Templates 2.0.3
• ElementsKit Elementor Addons and Templates 2.0.4
• ElementsKit Elementor Addons and Templates 2.0.5
• ElementsKit Elementor Addons and Templates 2.0.6
• ElementsKit Elementor Addons and Templates 2.0.7
• ElementsKit Elementor Addons and Templates 2.0.8
• ElementsKit Elementor Addons and Templates 2.0.9
• ElementsKit Elementor Addons and Templates 2.0.9.1
• ElementsKit Elementor Addons and Templates 2.0.9.2
• ElementsKit Elementor Addons and Templates 2.0.9.3
• ElementsKit Elementor Addons and Templates 2.0.10
• ElementsKit Elementor Addons and Templates 2.0.11
• ElementsKit Elementor Addons and Templates 2.0.12
• ElementsKit Elementor Addons and Templates 2.0.13
• ElementsKit Elementor Addons and Templates 2.1.0
• ElementsKit Elementor Addons and Templates 2.1.1
• ElementsKit Elementor Addons and Templates 2.1.2
• ElementsKit Elementor Addons and Templates 2.1.3
• ElementsKit Elementor Addons and Templates 2.1.4
• ElementsKit Elementor Addons and Templates 2.1.5
• ElementsKit Elementor Addons and Templates 2.1.6
• ElementsKit Elementor Addons and Templates 2.1.7
• ElementsKit Elementor Addons and Templates 2.2.0
• ElementsKit Elementor Addons and Templates 2.2.1
• ElementsKit Elementor Addons and Templates 2.2.2
• ElementsKit Elementor Addons and Templates 2.2.3
• ElementsKit Elementor Addons and Templates 2.2.4
• ElementsKit Elementor Addons and Templates 2.3.0
• ElementsKit Elementor Addons and Templates 2.3.1
• ElementsKit Elementor Addons and Templates 2.3.1.1
• ElementsKit Elementor Addons and Templates 2.3.2
• ElementsKit Elementor Addons and Templates 2.3.3
• ElementsKit Elementor Addons and Templates 2.3.4
• ElementsKit Elementor Addons and Templates 2.3.5
• ElementsKit Elementor Addons and Templates 2.3.6
• ElementsKit Elementor Addons and Templates 2.3.7
• ElementsKit Elementor Addons and Templates 2.4.0
• ElementsKit Elementor Addons and Templates 2.5.0
• ElementsKit Elementor Addons and Templates 2.5.1
• ElementsKit Elementor Addons and Templates 2.5.2
• ElementsKit Elementor Addons and Templates 2.5.3
• ElementsKit Elementor Addons and Templates 2.5.4
• ElementsKit Elementor Addons and Templates 2.5.5
• ElementsKit Elementor Addons and Templates 2.5.6
• ElementsKit Elementor Addons and Templates 2.5.7
• ElementsKit Elementor Addons and Templates 2.5.8
• ElementsKit Elementor Addons and Templates 2.5.9
• ElementsKit Elementor Addons and Templates 2.5.10
• ElementsKit Elementor Addons and Templates 2.6.0
• ElementsKit Elementor Addons and Templates 2.6.1
• ElementsKit Elementor Addons and Templates 2.6.2
• ElementsKit Elementor Addons and Templates 2.6.3
• ElementsKit Elementor Addons and Templates 2.7.0
• ElementsKit Elementor Addons and Templates 2.7.2
• ElementsKit Elementor Addons and Templates 2.7.3
• ElementsKit Elementor Addons and Templates 2.7.4
• ElementsKit Elementor Addons and Templates 2.7.5
• ElementsKit Elementor Addons and Templates 2.8.0
• ElementsKit Elementor Addons and Templates 2.8.1
• ElementsKit Elementor Addons and Templates 2.8.5
• ElementsKit Elementor Addons and Templates 2.8.6
• ElementsKit Elementor Addons and Templates 2.8.7
• ElementsKit Elementor Addons and Templates 2.8.8
• ElementsKit Elementor Addons and Templates 2.9.0
• ElementsKit Elementor Addons and Templates 2.9.1
• ElementsKit Elementor Addons and Templates 2.9.2
• ElementsKit Elementor Addons and Templates 3.0.0
• ElementsKit Elementor Addons and Templates 3.0.1
• ElementsKit Elementor Addons and Templates 3.0.2
• ElementsKit Elementor Addons and Templates 3.0.3
• ElementsKit Elementor Addons and Templates 3.0.4
• ElementsKit Elementor Addons and Templates 3.0.5
• ElementsKit Elementor Addons and Templates 3.0.6
• ElementsKit Elementor Addons and Templates 3.0.7
• ElementsKit Elementor Addons and Templates 3.1.0
• ElementsKit Elementor Addons and Templates 3.1.1
• ElementsKit Elementor Addons and Templates 3.1.2
• ElementsKit Elementor Addons and Templates 3.1.3
• ElementsKit Elementor Addons and Templates 3.1.4
• ElementsKit Elementor Addons and Templates 3.2.0
• ElementsKit Elementor Addons and Templates 3.2.1
• ElementsKit Elementor Addons and Templates 3.2.2
• ElementsKit Elementor Addons and Templates 3.2.3
• ElementsKit Elementor Addons and Templates 3.2.4
• ElementsKit Elementor Addons and Templates 3.2.5
• ElementsKit Elementor Addons and Templates 3.2.6
• ElementsKit Elementor Addons and Templates 3.2.7
• ElementsKit Elementor Addons and Templates 3.2.8
• ElementsKit Elementor Addons and Templates 3.2.9
• ElementsKit Elementor Addons and Templates 3.3.0
• ElementsKit Elementor Addons and Templates 3.3.1
• ElementsKit Elementor Addons and Templates 3.3.2
• ElementsKit Elementor Addons and Templates 3.3.3
• ElementsKit Elementor Addons and Templates 3.3.4
• ElementsKit Elementor Addons and Templates 3.3.5
• ElementsKit Elementor Addons and Templates 3.3.6
• ElementsKit Elementor Addons and Templates 3.3.7
• ElementsKit Elementor Addons and Templates 3.3.8
• ElementsKit Elementor Addons and Templates 3.3.9
• ElementsKit Elementor Addons and Templates 3.4.0
• ElementsKit Elementor Addons and Templates 3.4.1
• ElementsKit Elementor Addons and Templates 3.4.2
• ElementsKit Elementor Addons and Templates 3.4.3
• ElementsKit Elementor Addons and Templates 3.4.4
• ElementsKit Elementor Addons and Templates 3.4.5
• ElementsKit Elementor Addons and Templates 3.4.6
• ElementsKit Elementor Addons and Templates 3.4.7