ElementsKit Pro vulnerabilities

2 known vulnerabilities in ElementsKit Pro from Wpmet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  ElementsKit Pro: Server-Side Request Forgery

  CVE-2024-4404Jun 14, 2024Wpmet

  The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function. This can allow authenticated attackers, with contributor-level permissions and above, to make web reque

• 8.8 High severity

  ElementsKit Pro: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-3500May 2, 2024WpmetEPSS 1.06%

  The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it possible for authenticated attackers, with contributor-level acce