Blazethemes

News Kit Elementor Addons

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-25416

  • EPSS 0.19%
  • Veröffentlicht 19.02.2026 08:27:06
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Missing Authorization vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects News Kit Elementor Addons: from n/a through <= 1.4.2.

5.4

CVE-2025-54037

  • EPSS 0.22%
  • Veröffentlicht 16.07.2025 10:36:48
  • Zuletzt bearbeitet 23.04.2026 15:32:44

Missing Authorization vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects News Kit Elementor Addons: from n/a through <= 1.3.4.

6.5

CVE-2025-32196

  • EPSS 0.31%
  • Veröffentlicht 04.04.2025 16:15:29
  • Zuletzt bearbeitet 23.04.2026 15:28:44

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Stored XSS.This issue affects News Kit Elementor Addons: from n/a through <= ...

6.5

CVE-2024-54260

  • EPSS 0.29%
  • Veröffentlicht 09.12.2024 13:15:44
  • Zuletzt bearbeitet 23.04.2026 15:22:00

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Stored XSS.This issue affects News Kit Elementor Addons: from n/a through <= ...

4.3

CVE-2024-9541

  • EPSS 0.34%
  • Veröffentlicht 22.10.2024 08:15:02
  • Zuletzt bearbeitet 25.10.2024 21:16:12

The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.1 via the render function in includes/widgets/canvas-menu/canvas-menu.php. This makes it possible for authent...