Skt Templates

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sktthemes:skt_templates:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSktthemes (1f70c75e-6939-5120-9111-f750b964876f)
ProductSkt Templates (82150650-881f-5aba-a3ff-9cff177fb6e2)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/skttheme/skt-templates purl2cpe 2026-06-01 10:11:46.052635

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-44007 vulnerable 2026-06-08 06:45:53.411149 WordPress SKT Templates – Elementor & Gutenberg templates plugin <= 6.14 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Templates – Elementor & Gutenberg templates skt-templates allows Reflected XSS.This issue affects SKT Templates – Elementor & Gutenberg templates: from n/a through <= 6.14.
Published: 2024-09-17T23:04:40.514Z
Updated: 2026-05-12T22:47:06.126Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1337 vulnerable 2026-06-08 06:25:39.843551 SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection
MEDIUM (4.3)
The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveSktbuilderPageData' function in all versions up to, and including, 4.1. This makes it possible for authenticated attackers, with subscriber access and above, to inject arbitrary content into pages.
Published: 2024-02-20T18:56:25.369Z
Updated: 2026-04-08T16:45:08.994Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.