Unknown Elementskit Elementor Addons vulnerabilities

2 CVEs affecting Unknown Elementskit Elementor Addons, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13393, published 2026-07-31.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-13392, published 2026-07-31. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with administrative capabilities from being written verbatim into a…
• CVE-2026-13393, published 2026-07-31. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the front end, and does…