Wpmet Elementskit Elementor Addons — known CVE vulnerabilities

Every CVE whose affected-product data names Wpmet Elementskit Elementor Addons, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-4479 — CVSS 6.4 (medium): The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image…
• CVE-2024-11180 — CVSS 6.4 (medium): The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget…
• CVE-2024-8546 — CVSS 6.4 (medium): The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all…
• CVE-2025-1005 — CVSS 6.4 (medium): The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion widget…
• CVE-2025-3614 — CVSS 6.4 (medium): The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of a…
• CVE-2023-6525 — CVSS 5.5 (medium): The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the progress bar element attributes…
• CVE-2025-0968 — CVSS 5.3 (medium): The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including…