Analogwp Templates Vulnerabilities

The Style Kits plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.6.5. This makes it possible for authenticated attackers, with contributor-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 2.6.5

Fix:

No patched version reported

Disclosed:

Jul 22, 2026

CVE-2026-65484 on NVD →

The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2.5.0 due to insufficient input sanitization and output escapi...

CVSS:

6.4

Affected:

up to 2.5.0

Fixed in:

2.6.0

Disclosed:

May 26, 2026

CVE-2026-6565 on NVD →

The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0. This is due to missing or incorrect nonce validation on the update_posts_stylekit() function. This makes it possible for unauthenticated attackers to update style kits for posts via a forged request...

CVSS:

8.8

Affected:

up to 1.8.0

Fixed in:

1.8.1

Disclosed:

Mar 1, 2021

CVE-2021-4401 on NVD →