Medium 6.5
2025-09-22< 2.8.7
Ultimate Store Kit Elementor Addons <= 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Minimum safe version
2.9.5
Update to 2.9.5 or later to address 12 fixable vulnerabilities
Ultimate Store Kit Elementor Addons <= 2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-69336
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update
CVE-2025-39588
CVE-2025-32184
CVE-2025-24584
CVE-2024-47629
CVE-2024-8030
CVE-2024-5335
CVE-2024-43342
CVE-2024-4606
CVE-2024-31357