PLUGIN SECURITY
Is Elementskit safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Elementskit WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
elementskit
Known vulnerabilities
- CVE-2021-24258 — ElementsKit [elementskit] < 2.2.0 (XSS) · Medium
- CVE-2023-39993 — ElementsKit [elementskit] < 3.6.8 (Missing Authorization) · Medium
- CVE-2024-3598 — ElementsKit [elementskit] < 3.6.1 (XSS) · Medium
- CVE-2024-3500 — ElementsKit [elementskit] < 3.6.1 (File Inclusion) · High
- CVE-2024-4452 — ElementsKit [elementskit] < 3.6.2 (XSS) · Medium
+ 6 more known vulnerabilities
- CVE-2024-5263 — ElementsKit [elementskit] < 3.6.3 (XSS) · Medium
- CVE-2024-4404 — ElementsKit [elementskit] < 3.6.3 (SSRF) · Critical
- CVE-2024-7064 — ElementsKit [elementskit] < 3.6.6 (XSS) · Medium
- CVE-2024-7063 — ElementsKit [elementskit] < 3.6.7 (CWE-200) · Medium
- CVE-2024-43996 — ElementsKit [elementskit] < 3.6.8 (Path Traversal) · Medium
- CVE-2025-0321 — ElementsKit [elementskit] < 3.7.9 (XSS) · Medium
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.