ElementsKit Elementor addons Lite
Roxnor
Developer
3.8.1
Latest version
2,000,000
Installations
No date
Last updated
Vulnerability history
0 present
22 patched
3 Mitigation rules
- Unauthenticated Mailchimp REST Endpoint vulnerability< 3.7.96 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget vulnerability<= 3.5.2Dec 31, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget vulnerability<= 3.5.2Jun 19, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.4.7Mar 29, 2025
- Unauthenticated Information Exposure via get_megamenu_content Function vulnerability<= 3.4.0Feb 19, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget vulnerability<= 3.4.0Feb 14, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.2.9Oct 25, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget vulnerability<= 3.2.7Sep 25, 2024
- Unauthenticated Information Exposure via ekit_widgetarea_content Function vulnerability<= 3.2.0Jul 18, 2024
- Unauthenticated Broken Access Control vulnerability<= 3.1.4Jun 27, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget vulnerability<= 3.1.2May 1, 2024
- Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module vulnerability<= 3.1.0Apr 24, 2024
- Cross Site Scripting (XSS) vulnerability<= 3.0.6Apr 15, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability<= 3.0.7Apr 4, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.0.6Apr 1, 2024
- Authenticated (Contributor+) Local File Inclusion in render_raw vulnerability<= 3.0.6Apr 1, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget vulnerability<= 3.0.5Mar 18, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.0.4Mar 18, 2024
- Authenticated(Editor+) Stored Cross-Site Scripting vulnerability<= 3.0.3Mar 18, 2024
- Unauthenticated Sensitive Information Exposure vulnerability<= 3.0.3Jan 8, 2024
- Broken Access Control vulnerability<= 2.9.0Aug 23, 2023
- Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities<= 2.1.7Apr 13, 2021