SEGURIDAD DE PLUGINS
Vulnerabilidades conocidas, compatibilidad con PHP y alternativas más seguras para el plugin de WordPress Elementskit Lite — verificado contra la base de datos de seguridad local de WP Clinic.
elementskit-liteelementor addonelementor addonselementor widgetsheader footer buildermega menu builder
26 CVEs conocidos registrados para Elementskit Lite.
| CVE | Vulnerabilidad | Tipo | Gravedad | Afectadas | Corregido en | Publicado | Estado |
|---|---|---|---|---|---|---|---|
| CVE-2026-49053 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] <= 3.9.6 (unfixed) | Falta de control de autorización | Media 5,3 | < 3.9.6 | 3.9.6 | 2026-05-27 | ✓ corregido en la última versión |
| CVE-2026-49052 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] <= 3.9.6 (unfixed) | Falta de control de autorización | Media 4,3 | < 3.9.6 | 3.9.6 | 2026-05-27 | ✓ corregido en la última versión |
| CVE-2026-4362 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.9.0 | Falta de control de autorización | Media 6,5 | < 3.9.0 | 3.9.0 | 2026-05-04 | ✓ corregido en la última versión |
| CVE-2026-23693 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.7.9 | Falta de autenticación en una función crítica | Crítica 10,0 | < 3.7.9 | 3.7.9 | 2026-02-23 | ✓ corregido en la última versión |
| CVE-2024-11180 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.4.8 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,4 | < 3.4.8 | 3.4.8 | 2025-03-28 | ✓ corregido en la última versión |
| CVE-2024-10091 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.3.0 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,4 | < 3.3.0 | 3.3.0 | 2024-10-25 | ✓ corregido en la última versión |
| CVE-2024-8546 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.2.8 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.2.8 | 3.2.8 | 2024-09-24 | ✓ corregido en la última versión |
| CVE-2024-6455 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.2.1 | Exposición de información sensible a un actor no autorizado | Media 5,3 | < 3.2.1 | 3.2.1 | 2024-07-18 | ✓ corregido en la última versión |
The ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.9.6. This makes it possible for unauthenticated attackers to perform an unauthorized action.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.9.6. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an unauthorized action.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The ElementsKit Elementor Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `Live_Action::reset()` function in all versions up to, and including, 3.8.2 The function is hooked to the WordPress `init` action and triggers when both `post` and `action=elementor` GET parameters are present, with no authentication or nonce verification. This makes it possible for unauthenticated attackers to overwrite the Elementor content (`_elementor_data`) of any `elementskit_widget` custom post type by visiting a specially crafted URL. The widget's custom designs, text, and configurations are permanently replaced with a blank template.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpoint accepts client-supplied Mailchimp API credentials and insufficiently validates certain parameters, including the list parameter, when constructing upstream Mailchimp API requests. An unauthenticated attacker can abuse the endpoint as an open proxy to Mailchimp, potentially triggering unauthorized API calls, manipulating subscription data, exhausting API quotas, or causing resource consumption on the affected WordPress site.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget ekit_countdown_timer_title parameter in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capability checks on ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, pending and private items.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
| CVE | Vulnerabilidad | Tipo | Gravedad | Afectadas | Corregido en | Publicado | Estado |
|---|---|---|---|---|---|---|---|
| CVE-2024-37255 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.2.0 | Falta de control de autorización | Media 5,3 | < 3.2.0 | 3.2.0 | 2024-06-27 | ✓ corregido en la última versión |
| CVE-2024-3650 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.1.3 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.1.3 | 3.1.3 | 2024-04-30 | ✓ corregido en la última versión |
| CVE-2024-3499 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.1.1 | Control incorrecto del nombre de archivo en una sentencia include/require de PHP (inclusión remota de archivos PHP / RFI) | Alta 8,8 | < 3.1.1 | 3.1.1 | 2024-04-22 | ✓ corregido en la última versión |
| CVE-2024-32505 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.0.7 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,5 | < 3.0.7 | 3.0.7 | 2024-04-15 | ✓ corregido en la última versión |
| CVE-2024-2803 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.1.0 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.1.0 | 3.1.0 | 2024-04-03 | ✓ corregido en la última versión |
| CVE-2024-1238 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.0.7 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.0.7 | 3.0.7 | 2024-03-29 | ✓ corregido en la última versión |
| CVE-2024-2047 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.0.7 | Control incorrecto del nombre de archivo en una sentencia include/require de PHP (inclusión remota de archivos PHP / RFI) | Alta 8,8 | < 3.0.7 | 3.0.7 | 2024-03-29 | ✓ corregido en la última versión |
| CVE-2024-2042 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.0.6 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.0.6 | 3.0.6 | 2024-03-15 | ✓ corregido en la última versión |
| CVE-2024-1239 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.0.5 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.0.5 | 3.0.5 | 2024-03-15 | ✓ corregido en la última versión |
| CVE-2023-6525 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.0.4 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 3.0.4 | 3.0.4 | 2024-03-15 | ✓ corregido en la última versión |
| CVE-2023-6582 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.0.4 | Control de acceso incorrecto | Media 5,3 | < 3.0.4 | 3.0.4 | 2024-01-08 | ✓ corregido en la última versión |
| CVE-2023-39993 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 2.9.2 | Falta de control de autorización | Media 4,3 | < 2.9.2 | 2.9.2 | 2023-08-23 | ✓ corregido en la última versión |
| CVE-2021-24258 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 2.2.0 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 2.2.0 | 2.2.0 | 2021-04-13 | ✓ corregido en la última versión |
| — | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 2.2.0 | — | Desconocido | < 2.2.0 | 2.2.0 | 2021-04-13 | ✓ corregido en la última versión |
| CVE-2025-1005 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.4.1 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.4.1 | 3.4.1 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2025-0968 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.4.1 | Control de acceso incorrecto | Media 5,3 | < 3.4.1 | 3.4.1 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2025-4479 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.5.3 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.5.3 | 3.5.3 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2025-3614 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.5.3 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 3.5.3 | 3.5.3 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2026-2600 | ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.8.0 | — | Desconocido | < 3.8.0 | 3.8.0 | 0000-00-00 | ✓ corregido en la última versión |
The Elements kit Elementor addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_content_editor() function in versions up to, and including, 3.1.4. This makes it possible for unauthenticated attackers to update post data.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0.7 through 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generate_navigation_markup function of the Onepage Scroll module. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The ElementsKit Elementor addons Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
Update the WordPress Elements kit Elementor addons plugin to the latest available version (at least 3.1.0). Webbernaut discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Elements kit Elementor addons Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.1.0. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress Elements kit Elementor addons plugin to the latest available version (at least 3.0.7). wesley (wcraft) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Elements kit Elementor addons Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.0.7. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress Elements kit Elementor addons plugin to the latest available version (at least 3.0.7). wesley (wcraft) discovered and reported this Local File Inclusion vulnerability in WordPress Elements kit Elementor addons Plugin. This could allow a malicious actor to include local files of the target website and show its output onto the screen. Files which store credentials, such as database credentials, could potentially allow complete database takeover depending on the configuration. This vulnerability has been fixed in version 3.0.7. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress Elements kit Elementor addons plugin to the latest available version (at least 3.0.6). wesley (wcraft) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Elements kit Elementor addons Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.0.6. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress Elements kit Elementor addons plugin to the latest available version (at least 3.0.5). RandomRoot discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Elements kit Elementor addons Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.0.5. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress Elements kit Elementor addons plugin to the latest available version (at least 3.0.4). Ulyses Saicha discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Elements kit Elementor addons Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 3.0.4. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via the ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to obtain contents of posts in draft, private or pending review status that should not be visible to the general public. This applies to posts created with Elementor only.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
On June 24, 2023, the vendor confirmed they would provide a patch. No patched version is available. Rafie Muhammad (Patchstack) discovered and reported this Broken Access Control vulnerability in WordPress Elements kit Elementor addons Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
The Elements kit lite and Elements kit pro WordPress Plugins < 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method. The “fun fact” widget accepts an “ekit_funfact_title_size” parameter. Although the element control lists a fixed set of possible html tags, it is possible to send a ‘save_builder’ request containing JavaScript in the ‘ekit_funfact_title_size’ parameter, which is not filtered and is output without escaping. This JavaScript will then be executed when the saved page is viewed or previewed. The heading widget (includes/widgets/heading.php) accepts ‘ekit_heading_title_tag’ and ‘ekit_heading_sub_title_tag’ parameters. When sending a ‘save_builder’ request, these parameters can be set to ‘script’ and combined with the ‘ekit_heading_title’ or ‘ekit_heading_sub_title’ parameters containing JavaScript - although the ‘ekit_heading_sub_title’ parameter is escaped, this is trivial to overcome since the actual scripting tags are added in the ‘ekit_heading_sub_title_tag’. The icon box (includes/widgets/icon-box.php) widget accepts a ‘ekit_icon_box_title_size’ parameter. It is possible to send a modified ‘save_builder’ request containing JavaScript in the ‘ekit_icon_box_title_size’ parameter for this widget, which is not filtered and is output without escaping. Similarly, the image box (widgets/image-box/image-box.php) widget accepts an ‘ekit_image_box_title_size’ parameter. It is possible to send a modified ‘save_builder’ request containing JavaScript in the ‘ekit_image_box_title_size’ parameter for this widget, which is not filtered and is output without escaping. The pricing (widgets/pricing/pricing.php) widget accepts a ‘ekit_pricing_title_size’ parameter. When sending a ‘save_builder’ request, it is possible to set the ‘ekit_pricing_title_size’ parameter to ‘script’ and populate the ‘ekit_pricing_table_title’ parameter with Javascript - although the ‘ekit_pricing_table_title’ parameter is escrped, this is trivial to overcome since the actual script tag is added in the ‘ekit_pricing_title_size’ parameter. Finally, impacting the pro version only, the motion text (widgets/motion-text/motion-text.php) widget accepts a ‘ekit_motion_text_sub_title_tag’ parameter. It is possible to send a ‘save_builder’ request containing JavaScript in the ‘ekit_motion_text_sub_title_tag’ parameter, which is not filtered and is output without escaping. Each of these issues can be abused by a lower-privileged user, such as a contributor, to add malicious JavaScript to a post, which would then be executed in the browser of any user previewing that post. It is common for administrators or editors to preview the posts of users without publishing permissions before publishing their content.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: WPScan
Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered by WordFence in WordPress Elements kit Elementor addons plugin (versions <= 2.1.7).
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion widget in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.0 due to a missing capability checks on the get_megamenu_content() function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, trashed and private items.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widget's before/after labels in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of a custom widget in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab widget in all versions up to, and including, 3.7.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
Mantén Elementskit Lite actualizado — 3.10.02 es la última versión en wordpress.org, y cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en").
Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.
Ejecuta un escaneo pasivo gratis ahora, o crea una cuenta gratuita e instala el plugin de WP Clinic para un escaneo profundo de toda tu cuenta de hosting y reparación asistida por IA.