CyberSecBulletin

DynamicKit for Elementor vulnerabilities

We track 1 vulnerability in DynamicKit for Elementor products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest DynamicKit for Elementor vulnerabilities

  • 8.8 High severity

    DynamicKit for Elementor: Improper Authentication

    CVE-2026-14596DynamicKit for Elementor

    The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset link it emails, allowing unauthenticated attackers to send a target user a legitimately-formatted reset email wh