Hur vet jag om min sajt är påverkad?

Kör ett gratis test på sitesupport.co/testa-din-hemsida. Testet kontrollerar vilka tillägg och versioner du använder och jämför mot kända sårbarheter.

Vad ska jag göra om jag har en sårbar version?

Uppdatera till senaste versionen så snart som möjligt. Om ingen fix finns tillgänglig, överväg att tillfälligt inaktivera tillägget.

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor

Name: ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor
Rating: 4.9

4.9/5

2 000 000+ installationer

Join millions who empower their websites with ElementsKit Elementor Addons. Get templates, & 100+ widgets like header-footer, mega menu, custom widget

Kända sårbarheter

Kritiska / höga

2026-02-23

Senaste sårbarhet

2 000 000+

Aktiva installationer

Om ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor

Vad är ElementsKit Elementor Addons?

ElementsKit är ett populärt WordPress-tillägg som utökar Elementor med över 100 avancerade widgets och färdiga mallar. Tillägget används av cirka 2 miljoner webbplatser för att skapa header/footer-områden, megamenyer och andra avancerade designelement.

Säkerhetsläget för ElementsKit

Tillägget har 26 dokumenterade sårbarheter, vilket är betydligt fler än genomsnittet för WordPress-tillägg. Fördelningen visar:

21 medium-risk sårbarheter
3 high-risk sårbarheter
2 critical sårbarheter

Den senaste kända sårbarheten upptäcktes så sent som februari 2024, vilket indikerar att detta är ett pågående säkerhetsproblem.

Praktiska risker

De kritiska och högrisksårbarheterna kan potentiellt ge obehöriga användare administratörsrättigheter eller möjlighet att köra skadlig kod på din webbplats. Medium-risksårbarheterna kan leda till dataläckage eller defacement av webbplatsen.

Våra rekommendationer

Håll tillägget uppdaterat - installera säkerhetsuppdateringar omedelbart
Överväg alternativ - utvärdera om andra Elementor-tillägg kan möta dina behov
Förstärk säkerheten - använd säkerhetstillägg och begränsa användarrättigheter
Regelbunden övervakning - kontrollera för misstänkt aktivitet

Regelbundna uppdateringar är det viktigaste skyddet mot kända säkerhetshot i WordPress-tillägg.

Använder du ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor?

Kör ett gratis test och se om din hemsida är påverkad av dessa sårbarheter.

Testa din hemsida

Alla kända sårbarheter

Kritisk 2026-02-23 CVE-2026-23693

CVE-2026-23693: ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widge...

Påverkade versioner: unresolvable

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor (elementskit-lite) WordPress plugin versions prior to 3.7.9 expose the REST endpoint /wp-json/elementskit/v1/widget/mailchimp/subscribe without authentication. The endpo...

Medel 2025-07-24 CVE-2025-3614

CVE-2025-3614: The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of a custom widget in all versions up to, and including, 3.5.2...

Påverkade versioner: < 3.5.3

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL attribute of a custom widget in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output es...

Medel 2025-06-19 CVE-2025-4479

CVE-2025-4479: The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widget's before/after labels in all versions up to, ...

Påverkade versioner: < 3.5.3

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widget's before/after labels in all versions up to, and including, 3.5.2 due to insufficient input saniti...

Medel 2025-03-29 CVE-2024-11180

CVE-2024-11180: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget ekit_countdown_timer_title parameter in all versions up to, and inc...

Påverkade versioner: < 3.4.8

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget ekit_countdown_timer_title parameter in all versions up to, and including, 3.4.7 due to insufficient input sanitization...

Medel 2025-02-19 CVE-2025-0968

CVE-2025-0968: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.0 due to a missing capability checks on the get_mega...

Påverkade versioner: < 3.4.1

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.0 due to a missing capability checks on the get_megamenu_content() function. This makes it possible for u...

Medel 2025-02-15 CVE-2025-1005

CVE-2025-1005: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion widget in all versions up to, and including, 3.4.0 due to insuffi...

Påverkade versioner: < 3.4.1

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Accordion widget in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping on user...

Medel 2025-01-28 CVE-2025-0321

CVE-2025-0321: The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.7.8 due to insufficient input san...

Påverkade versioner: < 3.7.9

The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output escaping. This makes it possible for...

Medel 2024-10-26 CVE-2024-10091

CVE-2024-10091: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient in...

Påverkade versioner: < 3.3.0

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied...

Medel 2024-09-25 CVE-2024-8546

CVE-2024-8546: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all versions up to, and including, 3.2.7 due to insufficient inpu...

Påverkade versioner: < 3.2.8

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video widget in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping on user supplied a...

Medel 2024-08-15 CVE-2024-7064

CVE-2024-7064: The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 3.6.5 due to insufficient input sanitization and o...

Påverkade versioner: < 3.6.6

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 3.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authentica...

Medel 2024-08-15 CVE-2024-7063

CVE-2024-7063: The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function. This can allow authenticated atta...

Påverkade versioner: < 3.6.7

The ElementsKit Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.6 via the 'render_raw' function. This can allow authenticated attackers, with Contributor-level permissions and above,...

Medel 2024-07-18 CVE-2024-6455

CVE-2024-6455: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capability checks on ekit_widgetarea_content...

Påverkade versioner: < 3.2.1

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.2.0 due to a missing capability checks on ekit_widgetarea_content function. This makes it possible for unauthenticated...

Medel 2024-06-15 CVE-2024-5263

CVE-2024-5263: The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and Table widgets in all versions up to, and including, 3.6.2 due to insufficient ...

Påverkade versioner: < 3.6.3

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Motion Text and Table widgets in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping on user suppli...

Kritisk 2024-06-14 CVE-2024-4404

CVE-2024-4404: The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function. This can allow authenticated attackers, ...

Påverkade versioner: < 3.6.3

The ElementsKit PRO plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.6.2 via the 'render_raw' function. This can allow authenticated attackers, with contributor-level permissions and above, to make...

Medel 2024-05-21 CVE-2024-4452

CVE-2024-4452: The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 3.6.1 due to insufficient input sanitization and ...

Påverkade versioner: < 3.6.2

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

Medel 2024-05-02 CVE-2024-3650

CVE-2024-3650: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0.7 through 3.1.2 due to insufficient input sanit...

Påverkade versioner: < 3.1.3

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions 3.0.7 through 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible f...

Hög 2024-05-02 CVE-2024-3500

CVE-2024-3500: The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it po...

Påverkade versioner: < 3.6.1

The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6.0 via the Price Menu, Hotspot, and Advanced Toggle widgets. This makes it possible for authenticated attackers, with contributor-...

Hög 2024-05-02 CVE-2024-3499

CVE-2024-3499: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generate_navigation_markup function of the Onepage Sc...

Påverkade versioner: < 3.1.1

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.0 via the generate_navigation_markup function of the Onepage Scroll module. This makes it possible for authenticated...

Medel 2024-04-19 CVE-2024-3598

CVE-2024-3598: The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 3.6.0 due to insufficient input s...

Påverkade versioner: < 3.6.1

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping on user supplied attr...

Medel 2024-04-04 CVE-2024-2803

CVE-2024-2803: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to insufficient input san...

Påverkade versioner: < 3.1.0

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping on user supplied attrib...

Hög 2024-03-30 CVE-2024-2047

CVE-2024-2047: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.6 via the render_raw function. This makes it possible for authe...

Påverkade versioner: < 3.0.7

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.6 via the render_raw function. This makes it possible for authenticated attackers, with contributor-level access and...

Medel 2024-03-30 CVE-2024-1238

CVE-2024-1238: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button ID parameter in all versions up to, and including, 3.0.6 due to insufficient input ...

Påverkade versioner: < 3.0.7

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button ID parameter in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possi...

Medel 2024-03-16 CVE-2024-2042

CVE-2024-2042: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and including, 3.0.5 due to insufficient inp...

Påverkade versioner: < 3.0.6

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and including, 3.0.5 due to insufficient input sanitization and output escaping. This makes it po...

Medel 2024-03-16 CVE-2024-1239

CVE-2024-1239: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blog post read more button in all versions up to, and including, 3.0.4 due to insufficient...

Påverkade versioner: < 3.0.5

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blog post read more button in all versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes i...

Medel 2024-03-16 CVE-2023-6525

CVE-2023-6525: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the progress bar element attributes in all versions up to, and including, 3.0.3 due to insuffi...

Påverkade versioner: < 3.0.4

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the progress bar element attributes in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping. This ma...

Medel 2024-01-11 CVE-2023-6582

CVE-2023-6582: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via the ekit_widgetarea_content function. This make...

Påverkade versioner: < 3.0.4

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.3 via the ekit_widgetarea_content function. This makes it possible for unauthenticated attackers to obtain...

Så skyddar du din sajt

Sårbarheter i tillägg är den vanligaste attackytan för WordPress-sajter. Det bästa skyddet är att vara proaktiv — här är tre konkreta steg.

Håll tillägget uppdaterat

De flesta sårbarheter i ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor åtgärdas snabbt av utvecklarna. Uppdatera alltid till senaste versionen.

Ta bort oanvända tillägg

Varje tillägg är en potentiell attackyta. Avinstallera det du inte aktivt använder.

Bevaka automatiskt

Med löpande övervakning upptäcker du problem innan de blir allvarliga.

Vill du slippa hålla koll själv? Med ett supportavtal från Sitesupport sköter vi uppdateringar och säkerhet åt dig.

Vanliga frågor om ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor har 26 kända sårbarheter, varav 5 med hög eller kritisk allvarlighetsgrad. Det betyder inte nödvändigtvis att tillägget är osäkert — de flesta sårbarheter åtgärdas i nya versioner. Det viktigaste är att alltid köra den senaste versionen.

Det enklaste sättet är att köra ett gratis test av din hemsida på sitesupport.co. Testet kontrollerar vilka tillägg du använder och vilka versioner som är installerade, och jämför det mot kända sårbarheter.

Uppdatera till den senaste versionen så snart som möjligt. Om det inte finns en uppdatering som åtgärdar problemet bör du överväga att tillfälligt inaktivera tillägget, särskilt om sårbarheten har kritisk eller hög allvarlighetsgrad.

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor har över 2 000 000 aktiva installationer på WordPress.org och ett betyg på 4.9 av 5. Populära tillägg har generellt bättre säkerhetsrutiner tack vare större community och fler ögon på koden.