ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 0.6%
from disclosure to weapon
Published on NVDMay 5
VulnCheck+624d
exploitation probability
0.6%top 53% of all CVEs
observed exploitation
yesVulnCheck
The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.