plugin
4 known security issues reported for the K Elements WordPress plugin. Most recent disclosed Oct 31, 2025.
Running K Elements on your site? Check whether your installed version is affected.
Scan your site free[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through < 5.5.0.
The K Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 5.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whe...
[en] Incorrect Privilege Assignment vulnerability in SeventhQueen K Elements allows Privilege Escalation.This issue affects K Elements: from n/a before 5.4.0.
The K Elements plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.3.9. This is due to the kleo_fb_intialize() function not having sufficient identity verification prior to authenticating a user. This makes it possible for unauthenticated attackers to log in as arbitrary...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free