ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor

Vulnerabilities 25Slug elementskit-liteLatest version 3.9.3WordPress.org →

Minimum safe version

3.9.0

Update to 3.9.0 or later to address 25 fixable vulnerabilities

Latest available3.9.3 ✓

Medium 6.5

2026-05-05< 3.9.0

CVE-2026-4362

CVE Wordfence

N/A

2026-04-03< 3.8.0

ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget

Wordfence CVE

Critical 10.0

2026-02-24< 3.7.9

ElementsKit Elementor addons Lite < 3.7.9 - Missing Authorization

Wordfence CVE

Medium 6.4

2025-07-24< 3.5.3

ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget

Wordfence EUVD CVE

Medium 6.4

2025-06-19< 3.5.3

ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget

EUVD Wordfence CVE

Medium 6.4

2025-03-29< 3.4.8

CVE-2024-11180

CVE EUVD Wordfence

Medium 5.3

2025-02-19< 3.4.1

ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function

EUVD Wordfence CVE

Medium 6.4

2025-02-15< 3.4.1

WordPress Elements kit Elementor addons Plugin <= 3.4.0 is vulnerable to Cross Site Scripting (XSS)

EUVD Patchstack Wordfence CVE

Medium 6.4

2024-10-26< 3.3.0

CVE-2024-10091

CVE Wordfence Patchstack

Medium 5.4

2024-09-25< 3.2.8

CVE-2024-8546

CVE Patchstack Wordfence

Medium 5.3

2024-07-18< 3.2.1

CVE-2024-6455

CVE Patchstack Wordfence

Medium 5.3

2024-11-01< 3.2.0

CVE-2024-37255

CVE Patchstack Wordfence

Medium 5.4

2024-05-02< 3.1.3

CVE-2024-3650

CVE Patchstack Wordfence

High 8.8

2024-05-02< 3.1.1

CVE-2024-3499

CVE Patchstack Wordfence

Medium 6.5

2024-04-17< 3.0.7

CVE-2024-32505

CVE EUVD Patchstack Wordfence

Medium 5.4

2024-04-04< 3.1.0

CVE-2024-2803

CVE Wordfence Patchstack

High 8.8

2024-03-30< 3.0.7

CVE-2024-2047

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-30< 3.0.7

CVE-2024-1238

CVE Wordfence Patchstack WPScan

Medium 4.8

2024-03-16< 3.0.4

CVE-2023-6525

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-16< 3.0.5

CVE-2024-1239

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-16< 3.0.6

CVE-2024-2042

CVE Wordfence Patchstack WPScan

Medium 5.3

2024-01-11< 3.0.4

CVE-2023-6582

CVE Wordfence Patchstack WPScan

Medium 4.3

2024-06-19< 2.9.2

CVE-2023-39993

CVE Patchstack Wordfence WPScan

N/A

2021-04-13< 2.2.0

WordPress Elements kit Elementor addons plugin <= 2.1.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Patchstack

Medium 5.4

2021-05-05< 2.2.0

CVE-2021-24258

CVE Wordfence WPScan