Stored Cross-Site Scripting in ElementsKit Simple Tab Widget

Skrevet den af i ElementsKit Elementor Addons and Templates

A user with Contributor account can store JavaScript in a Simple Tab widget title, which ElementsKit renders unescaped on the front end. The script then runs for every visitor who views the page. Affects ElementsKit Lite 2.8.8 to 3.7.9.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3
  • ElementsKit Elementor Addons and Templates 3.4.4
  • ElementsKit Elementor Addons and Templates 3.4.5
  • ElementsKit Elementor Addons and Templates 3.4.6
  • ElementsKit Elementor Addons and Templates 3.4.7
  • ElementsKit Elementor Addons and Templates 3.4.8
  • ElementsKit Elementor Addons and Templates 3.4.9
  • ElementsKit Elementor Addons and Templates 3.5.0
  • ElementsKit Elementor Addons and Templates 3.5.1
  • ElementsKit Elementor Addons and Templates 3.5.2
  • ElementsKit Elementor Addons and Templates 3.5.3
  • ElementsKit Elementor Addons and Templates 3.5.4
  • ElementsKit Elementor Addons and Templates 3.5.5
  • ElementsKit Elementor Addons and Templates 3.5.6
  • ElementsKit Elementor Addons and Templates 3.6.0
  • ElementsKit Elementor Addons and Templates 3.6.1
  • ElementsKit Elementor Addons and Templates 3.7.0
  • ElementsKit Elementor Addons and Templates 3.7.1
  • ElementsKit Elementor Addons and Templates 3.7.2
  • ElementsKit Elementor Addons and Templates 3.7.3
  • ElementsKit Elementor Addons and Templates 3.7.4
  • ElementsKit Elementor Addons and Templates 3.7.5
  • ElementsKit Elementor Addons and Templates 3.7.6
  • ElementsKit Elementor Addons and Templates 3.7.7
  • ElementsKit Elementor Addons and Templates 3.7.8
  • ElementsKit Elementor Addons and Templates 3.7.9

Broken access control in dynamic content editor REST API

Skrevet den af i ElementsKit Elementor Addons and Templates

A missing authorization check in the Dynamic Content Editor REST endpoint allowed any authenticated user with Contributor-level access or above to create ElementsKit dynamic content posts and open the Elementor editor for content owned by other users. Low-privileged accounts could therefore add and modify site content they should not have access to.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.7
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3
  • ElementsKit Elementor Addons and Templates 3.4.4
  • ElementsKit Elementor Addons and Templates 3.4.5
  • ElementsKit Elementor Addons and Templates 3.4.6
  • ElementsKit Elementor Addons and Templates 3.4.7
  • ElementsKit Elementor Addons and Templates 3.4.8
  • ElementsKit Elementor Addons and Templates 3.4.9
  • ElementsKit Elementor Addons and Templates 3.5.0
  • ElementsKit Elementor Addons and Templates 3.5.1
  • ElementsKit Elementor Addons and Templates 3.5.2
  • ElementsKit Elementor Addons and Templates 3.5.3
  • ElementsKit Elementor Addons and Templates 3.5.4
  • ElementsKit Elementor Addons and Templates 3.5.5
  • ElementsKit Elementor Addons and Templates 3.5.6
  • ElementsKit Elementor Addons and Templates 3.6.0
  • ElementsKit Elementor Addons and Templates 3.6.1
  • ElementsKit Elementor Addons and Templates 3.7.0
  • ElementsKit Elementor Addons and Templates 3.7.1
  • ElementsKit Elementor Addons and Templates 3.7.2
  • ElementsKit Elementor Addons and Templates 3.7.3
  • ElementsKit Elementor Addons and Templates 3.7.4
  • ElementsKit Elementor Addons and Templates 3.7.5
  • ElementsKit Elementor Addons and Templates 3.7.6
  • ElementsKit Elementor Addons and Templates 3.7.7
  • ElementsKit Elementor Addons and Templates 3.7.8
  • ElementsKit Elementor Addons and Templates 3.7.9
  • ElementsKit Elementor Addons and Templates 3.8.0
  • ElementsKit Elementor Addons and Templates 3.8.1
  • ElementsKit Elementor Addons and Templates 3.8.2
  • ElementsKit Elementor Addons and Templates 3.9.0
  • ElementsKit Elementor Addons and Templates 3.9.1
  • ElementsKit Elementor Addons and Templates 3.9.2
  • ElementsKit Elementor Addons and Templates 3.9.3
  • ElementsKit Elementor Addons and Templates 3.9.5
  • ElementsKit Elementor Addons and Templates 3.9.6

Missing Authorization in Layout Library REST API (Unauthenticated Access)

Skrevet den af i ElementsKit Elementor Addons and Templates

An unauthenticated attacker could call the layout-list REST endpoint to retrieve layout library data, including potentially sensitive template content, without any authentication or capability check. The fix adds a current_user_can(‘edit_posts’) check that returns HTTP 403 for unauthenticated or unauthorized requests.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3
  • ElementsKit Elementor Addons and Templates 3.4.4
  • ElementsKit Elementor Addons and Templates 3.4.5
  • ElementsKit Elementor Addons and Templates 3.4.6
  • ElementsKit Elementor Addons and Templates 3.4.7
  • ElementsKit Elementor Addons and Templates 3.4.8
  • ElementsKit Elementor Addons and Templates 3.4.9
  • ElementsKit Elementor Addons and Templates 3.5.0
  • ElementsKit Elementor Addons and Templates 3.5.1
  • ElementsKit Elementor Addons and Templates 3.5.2
  • ElementsKit Elementor Addons and Templates 3.5.3
  • ElementsKit Elementor Addons and Templates 3.5.4
  • ElementsKit Elementor Addons and Templates 3.5.5
  • ElementsKit Elementor Addons and Templates 3.5.6
  • ElementsKit Elementor Addons and Templates 3.6.0
  • ElementsKit Elementor Addons and Templates 3.6.1
  • ElementsKit Elementor Addons and Templates 3.7.0
  • ElementsKit Elementor Addons and Templates 3.7.1
  • ElementsKit Elementor Addons and Templates 3.7.2
  • ElementsKit Elementor Addons and Templates 3.7.3
  • ElementsKit Elementor Addons and Templates 3.7.4
  • ElementsKit Elementor Addons and Templates 3.7.5
  • ElementsKit Elementor Addons and Templates 3.7.6
  • ElementsKit Elementor Addons and Templates 3.7.7
  • ElementsKit Elementor Addons and Templates 3.7.8
  • ElementsKit Elementor Addons and Templates 3.7.9
  • ElementsKit Elementor Addons and Templates 3.8.0
  • ElementsKit Elementor Addons and Templates 3.8.1
  • ElementsKit Elementor Addons and Templates 3.8.2
  • ElementsKit Elementor Addons and Templates 3.9.0
  • ElementsKit Elementor Addons and Templates 3.9.1
  • ElementsKit Elementor Addons and Templates 3.9.2
  • ElementsKit Elementor Addons and Templates 3.9.3
  • ElementsKit Elementor Addons and Templates 3.9.5
  • ElementsKit Elementor Addons and Templates 3.9.6

Stored cross-site scripting via countdown timer expiry attributes

Skrevet den af i ElementsKit Elementor Addons and Templates

The Countdown Timer widget outputs the “On Expiry Title” and “On Expiry Content” values directly into HTML data attributes without escaping or sanitization. An authenticated attacker with the ability to edit Elementor widgets (contributor role or above) can inject arbitrary JavaScript through these fields

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3

Hardening Output Escaping in Widget Builder

Skrevet den af i ElementsKit Elementor Addons and Templates

Improved the output escaping in widget-writer so that widget settings are properly sanitized before being rendered on the page. This prevents potential cross-site scripting (XSS) issues from malicious or unexpected widget content and makes custom widgets safer for site visitors.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3
  • ElementsKit Elementor Addons and Templates 3.4.4
  • ElementsKit Elementor Addons and Templates 3.4.5
  • ElementsKit Elementor Addons and Templates 3.4.6
  • ElementsKit Elementor Addons and Templates 3.4.7
  • ElementsKit Elementor Addons and Templates 3.4.8
  • ElementsKit Elementor Addons and Templates 3.4.9
  • ElementsKit Elementor Addons and Templates 3.5.0
  • ElementsKit Elementor Addons and Templates 3.5.1
  • ElementsKit Elementor Addons and Templates 3.5.2

Stored cross-site scripting via image comparison widget

Skrevet den af i ElementsKit Elementor Addons and Templates

Stored Cross-Site Scripting via the plugin image comparison widget due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.7
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3
  • ElementsKit Elementor Addons and Templates 3.4.4
  • ElementsKit Elementor Addons and Templates 3.4.5
  • ElementsKit Elementor Addons and Templates 3.4.6
  • ElementsKit Elementor Addons and Templates 3.4.7
  • ElementsKit Elementor Addons and Templates 3.4.8
  • ElementsKit Elementor Addons and Templates 3.4.9
  • ElementsKit Elementor Addons and Templates 3.5.0
  • ElementsKit Elementor Addons and Templates 3.5.1
  • ElementsKit Elementor Addons and Templates 3.5.2

Unauthenticated Iinformation exposure via ekit_widgetarea_content function

Skrevet den af i ElementsKit Elementor Addons and Templates

Due to a missing capability checks on ekit_widgetarea_content function, unauthenticated attackers are able to view any item created in Elementor, such as posts, pages and templates including drafts, pending and private items.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0

Missing authorization in dynamic content api

Skrevet den af i ElementsKit Elementor Addons and Templates

Plugin is vulnerable due to a missing capability check on the get_content_editor() which can cause unauthorized modification of data.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.7
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4

Stored cross-site scripting via ekit_countdown_timer_title parameter

Skrevet den af i ElementsKit Elementor Addons and Templates

Due to insufficient input sanitization and output escaping via the Countdown Timer Widget ekit_countdown_timer_title parameter, authenticated attackers, with Contributor-level access and above, can inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.7
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1

Authenticated (contributor+) stored cross-site scripting in countdown timer

Skrevet den af i ElementsKit Elementor Addons and Templates

Stored cross-site scripting available via the countdown timer widget ekit_countdown_timer_title parameter due to insufficient input sanitization and output escaping.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0
  • ElementsKit Elementor Addons and Templates 3.4.1
  • ElementsKit Elementor Addons and Templates 3.4.2
  • ElementsKit Elementor Addons and Templates 3.4.3
  • ElementsKit Elementor Addons and Templates 3.4.4
  • ElementsKit Elementor Addons and Templates 3.4.5
  • ElementsKit Elementor Addons and Templates 3.4.6
  • ElementsKit Elementor Addons and Templates 3.4.7

Authenticated (contributor+) stored cross-site scripting via video widget

Skrevet den af i ElementsKit Elementor Addons and Templates

Due to insufficient input sanitization and output escaping on user supplied attributes. this makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7

Authenticated (contributor+) stored cross-site scripting via image comparison widget

Skrevet den af i ElementsKit Elementor Addons and Templates

Stored cross-site scripting via the image comparison widget due to insufficient input sanitization and output escaping on user supplied attributes. this makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 1.2.6
  • ElementsKit Elementor Addons and Templates 1.2.7
  • ElementsKit Elementor Addons and Templates 1.2.9
  • ElementsKit Elementor Addons and Templates 1.3.1
  • ElementsKit Elementor Addons and Templates 1.3.2
  • ElementsKit Elementor Addons and Templates 1.3.3
  • ElementsKit Elementor Addons and Templates 1.3.4
  • ElementsKit Elementor Addons and Templates 1.3.5
  • ElementsKit Elementor Addons and Templates 1.3.8
  • ElementsKit Elementor Addons and Templates 1.3.9
  • ElementsKit Elementor Addons and Templates 1.4.0
  • ElementsKit Elementor Addons and Templates 1.4.1
  • ElementsKit Elementor Addons and Templates 1.4.2
  • ElementsKit Elementor Addons and Templates 1.4.3
  • ElementsKit Elementor Addons and Templates 1.4.4
  • ElementsKit Elementor Addons and Templates 1.4.5
  • ElementsKit Elementor Addons and Templates 1.4.7
  • ElementsKit Elementor Addons and Templates 1.4.8
  • ElementsKit Elementor Addons and Templates 1.4.9
  • ElementsKit Elementor Addons and Templates 1.5.0
  • ElementsKit Elementor Addons and Templates 1.5.1
  • ElementsKit Elementor Addons and Templates 1.5.2
  • ElementsKit Elementor Addons and Templates 1.5.4
  • ElementsKit Elementor Addons and Templates 1.5.5
  • ElementsKit Elementor Addons and Templates 1.5.6
  • ElementsKit Elementor Addons and Templates 1.5.7
  • ElementsKit Elementor Addons and Templates 1.5.8
  • ElementsKit Elementor Addons and Templates 1.5.9
  • ElementsKit Elementor Addons and Templates 1.5.10
  • ElementsKit Elementor Addons and Templates 1.5.11
  • ElementsKit Elementor Addons and Templates 1.5.12
  • ElementsKit Elementor Addons and Templates 2.0.0
  • ElementsKit Elementor Addons and Templates 2.0.1
  • ElementsKit Elementor Addons and Templates 2.0.2
  • ElementsKit Elementor Addons and Templates 2.0.3
  • ElementsKit Elementor Addons and Templates 2.0.4
  • ElementsKit Elementor Addons and Templates 2.0.5
  • ElementsKit Elementor Addons and Templates 2.0.6
  • ElementsKit Elementor Addons and Templates 2.0.7
  • ElementsKit Elementor Addons and Templates 2.0.8
  • ElementsKit Elementor Addons and Templates 2.0.9
  • ElementsKit Elementor Addons and Templates 2.0.9.1
  • ElementsKit Elementor Addons and Templates 2.0.9.2
  • ElementsKit Elementor Addons and Templates 2.0.9.3
  • ElementsKit Elementor Addons and Templates 2.0.10
  • ElementsKit Elementor Addons and Templates 2.0.11
  • ElementsKit Elementor Addons and Templates 2.0.12
  • ElementsKit Elementor Addons and Templates 2.0.13
  • ElementsKit Elementor Addons and Templates 2.1.0
  • ElementsKit Elementor Addons and Templates 2.1.1
  • ElementsKit Elementor Addons and Templates 2.1.2
  • ElementsKit Elementor Addons and Templates 2.1.3
  • ElementsKit Elementor Addons and Templates 2.1.4
  • ElementsKit Elementor Addons and Templates 2.1.5
  • ElementsKit Elementor Addons and Templates 2.1.6
  • ElementsKit Elementor Addons and Templates 2.1.7
  • ElementsKit Elementor Addons and Templates 2.2.0
  • ElementsKit Elementor Addons and Templates 2.2.1
  • ElementsKit Elementor Addons and Templates 2.2.2
  • ElementsKit Elementor Addons and Templates 2.2.3
  • ElementsKit Elementor Addons and Templates 2.2.4
  • ElementsKit Elementor Addons and Templates 2.3.0
  • ElementsKit Elementor Addons and Templates 2.3.1
  • ElementsKit Elementor Addons and Templates 2.3.1.1
  • ElementsKit Elementor Addons and Templates 2.3.2
  • ElementsKit Elementor Addons and Templates 2.3.3
  • ElementsKit Elementor Addons and Templates 2.3.4
  • ElementsKit Elementor Addons and Templates 2.3.5
  • ElementsKit Elementor Addons and Templates 2.3.6
  • ElementsKit Elementor Addons and Templates 2.3.7
  • ElementsKit Elementor Addons and Templates 2.4.0
  • ElementsKit Elementor Addons and Templates 2.5.0
  • ElementsKit Elementor Addons and Templates 2.5.1
  • ElementsKit Elementor Addons and Templates 2.5.2
  • ElementsKit Elementor Addons and Templates 2.5.3
  • ElementsKit Elementor Addons and Templates 2.5.4
  • ElementsKit Elementor Addons and Templates 2.5.5
  • ElementsKit Elementor Addons and Templates 2.5.6
  • ElementsKit Elementor Addons and Templates 2.5.7
  • ElementsKit Elementor Addons and Templates 2.5.8
  • ElementsKit Elementor Addons and Templates 2.5.9
  • ElementsKit Elementor Addons and Templates 2.5.10
  • ElementsKit Elementor Addons and Templates 2.6.0
  • ElementsKit Elementor Addons and Templates 2.6.1
  • ElementsKit Elementor Addons and Templates 2.6.2
  • ElementsKit Elementor Addons and Templates 2.6.3
  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9

Information exposure via get_megamenu_content function

Skrevet den af i ElementsKit Elementor Addons and Templates

Due to a missing capability checks on the get_megamenu_content() function, unauthenticated attackers can view any item created in Elementor, such as posts, pages and templates including drafts, trashed and private items.

This vulnerability affects the following application versions:

  • ElementsKit Elementor Addons and Templates 2.7.0
  • ElementsKit Elementor Addons and Templates 2.7.2
  • ElementsKit Elementor Addons and Templates 2.7.3
  • ElementsKit Elementor Addons and Templates 2.7.4
  • ElementsKit Elementor Addons and Templates 2.7.5
  • ElementsKit Elementor Addons and Templates 2.8.0
  • ElementsKit Elementor Addons and Templates 2.8.1
  • ElementsKit Elementor Addons and Templates 2.8.5
  • ElementsKit Elementor Addons and Templates 2.8.6
  • ElementsKit Elementor Addons and Templates 2.8.7
  • ElementsKit Elementor Addons and Templates 2.8.8
  • ElementsKit Elementor Addons and Templates 2.9.0
  • ElementsKit Elementor Addons and Templates 2.9.1
  • ElementsKit Elementor Addons and Templates 2.9.2
  • ElementsKit Elementor Addons and Templates 3.0.0
  • ElementsKit Elementor Addons and Templates 3.0.1
  • ElementsKit Elementor Addons and Templates 3.0.2
  • ElementsKit Elementor Addons and Templates 3.0.3
  • ElementsKit Elementor Addons and Templates 3.0.4
  • ElementsKit Elementor Addons and Templates 3.0.5
  • ElementsKit Elementor Addons and Templates 3.0.6
  • ElementsKit Elementor Addons and Templates 3.0.7
  • ElementsKit Elementor Addons and Templates 3.1.0
  • ElementsKit Elementor Addons and Templates 3.1.1
  • ElementsKit Elementor Addons and Templates 3.1.2
  • ElementsKit Elementor Addons and Templates 3.1.3
  • ElementsKit Elementor Addons and Templates 3.1.4
  • ElementsKit Elementor Addons and Templates 3.2.0
  • ElementsKit Elementor Addons and Templates 3.2.1
  • ElementsKit Elementor Addons and Templates 3.2.2
  • ElementsKit Elementor Addons and Templates 3.2.3
  • ElementsKit Elementor Addons and Templates 3.2.4
  • ElementsKit Elementor Addons and Templates 3.2.5
  • ElementsKit Elementor Addons and Templates 3.2.6
  • ElementsKit Elementor Addons and Templates 3.2.7
  • ElementsKit Elementor Addons and Templates 3.2.8
  • ElementsKit Elementor Addons and Templates 3.2.9
  • ElementsKit Elementor Addons and Templates 3.3.0
  • ElementsKit Elementor Addons and Templates 3.3.1
  • ElementsKit Elementor Addons and Templates 3.3.2
  • ElementsKit Elementor Addons and Templates 3.3.3
  • ElementsKit Elementor Addons and Templates 3.3.4
  • ElementsKit Elementor Addons and Templates 3.3.5
  • ElementsKit Elementor Addons and Templates 3.3.6
  • ElementsKit Elementor Addons and Templates 3.3.7
  • ElementsKit Elementor Addons and Templates 3.3.8
  • ElementsKit Elementor Addons and Templates 3.3.9
  • ElementsKit Elementor Addons and Templates 3.4.0