ElementsKit Elementor addons Lite
Roxnor
Developer
3.9.7
Latest version
1,000,000
Installations
No date
Last updated
Vulnerability history
0 present
26 patched
4 Mitigation rules
- Broken Access Control vulnerability<= 3.9.627/05/2026
- Broken Access Control vulnerability<= 3.9.627/05/2026
- Missing Authorization to Unauthenticated Widget Content Overwrite vulnerability<= 3.8.206/05/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget vulnerability<= 3.7.904/04/2026
- Unauthenticated Mailchimp REST Endpoint vulnerability< 3.7.924/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget vulnerability<= 3.5.231/12/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget vulnerability<= 3.5.219/06/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.4.729/03/2025
- Unauthenticated Information Exposure via get_megamenu_content Function vulnerability<= 3.4.019/02/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget vulnerability<= 3.4.014/02/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.2.925/10/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget vulnerability<= 3.2.725/09/2024
- Unauthenticated Information Exposure via ekit_widgetarea_content Function vulnerability<= 3.2.018/07/2024
- Unauthenticated Broken Access Control vulnerability<= 3.1.427/06/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget vulnerability<= 3.1.201/05/2024
- Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module vulnerability<= 3.1.024/04/2024
- Cross Site Scripting (XSS) vulnerability<= 3.0.615/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability<= 3.0.704/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.0.601/04/2024
- Authenticated (Contributor+) Local File Inclusion in render_raw vulnerability<= 3.0.601/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget vulnerability<= 3.0.518/03/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.0.418/03/2024
- Authenticated(Editor+) Stored Cross-Site Scripting vulnerability<= 3.0.318/03/2024
- Unauthenticated Sensitive Information Exposure vulnerability<= 3.0.308/01/2024
- Broken Access Control vulnerability<= 2.9.023/08/2023
- Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities<= 2.1.713/04/2021