Approved changes feed: RSS · Atom

cpe:2.3:a:wpmet:elements_kit_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpmet (bd15281a-fefd-5c31-99d6-3b159865bbf7)
ProductElements Kit Pro (aea57048-4af1-5823-8c7f-2c2f262b8b82)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24258 vulnerable 2026-06-03 14:43:56.641525 ElementsKit and ElementsKit Pro < 2.2.0 - Contributor+ Stored XSS
The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.
Published: 2021-05-05T18:28:46.000Z
Updated: 2024-08-03T19:28:22.245Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.