WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.16 - Missing Authentication via wdkit_handle_review_submission Function
medium
The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to missing authorization via the wdkit_handle_review_submission function in versions less than, or equal to, 1.2.16. This is due to the plugin not properly verifying that a user is aut...
- CVSS:
- 4.3
- Affected:
- up to 1.2.16
- Fixed in:
- 1.2.17
- Disclosed:
- Oct 3, 2025
CVE-2025-9029 on NVD →
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder [wdesignkit] < 1.2.4
unknown
[en] The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible fo...
- Affected:
- up to 1.2.4
- Fixed in:
- 1.2.4
- Disclosed:
- Apr 1, 2025
CVE-2024-12189 on NVD →
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
medium
The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for aut...
- CVSS:
- 6.4
- Affected:
- up to 1.2.3
- Fixed in:
- 1.2.4
- Disclosed:
- Mar 31, 2025
CVE-2024-12189 on NVD →
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder [wdesignkit] < 1.1.0
unknown
[en] Unrestricted Upload of File with Dangerous Type vulnerability in POSIMYTH WDesignkit allows Upload a Web Shell to a Web Server.This issue affects WDesignkit: from n/a through 1.0.40.
- Affected:
- up to 1.1.0
- Fixed in:
- 1.1.0
- Disclosed:
- Dec 6, 2024
CVE-2024-53811 on NVD →
WDesignkit <= 1.0.40 - Authenticated (Administrator+) Arbitrary File Upload
high
The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.40. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitra...
- CVSS:
- 7.2
- Affected:
- up to 1.0.40
- Fixed in:
- 1.1.0
- Disclosed:
- Dec 2, 2024
CVE-2024-53811 on NVD →
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder [wdesignkit] < 1.2.17
unknown
- Affected:
- up to 1.2.17
- Fixed in:
- 1.2.17
CVE-2025-9029 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database