Is Elementskit Lite safe?

Plugin details

• Slug: elementskit-lite
• Requires PHP: 7.4+

Known vulnerabilities

• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 2.2.0 [CVE-2021-24258, Elements Kit Lite/Pro <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting, ElementsKit and ElementsKit Pro &lt; 2.2.0 - Contributor+ Stored XSS]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 2.2.0 [WordPress Elements kit Elementor addons plugin <= 2.1.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 2.9.2 [CVE-2023-39993, WordPress Elements kit Elementor addons Plugin <= 2.9.0 is vulnerable to Broken Access Control, Elements kit Elementor addons <= 2.9.1 - Missing Authorization, Elements kit Elementor addons &lt; 2.9.2 - Missing Authorization]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.0.4 [CVE-2023-6582, ElementsKit Lite <= 3.0.3 - Unauthenticated Sensitive Information Exposure, WordPress Elements kit Elementor addons Plugin <= 3.0.3 is vulnerable to Sensitive Data Exposure, ElementsKit Lite &lt; 3.0.4 - Unauthenticated Sensitive Information Exposure]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.0.6 [CVE-2024-2042, ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget, WordPress Elements kit Elementor addons Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS), ElementsKit Elementor addons &lt; 3.0.6 - Contributor+ Stored XSS]

+ 22 more known vulnerabilities

• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.0.5 [CVE-2024-1239, ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting, WordPress Elements kit Elementor addons Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS), ElementsKit Elementor addons &lt; 3.0.5 - Contributor+ Stored XSS]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.0.4 [CVE-2023-6525, ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting, WordPress Elements kit Elementor addons Plugin <= 3.0.3 is vulnerable to Cross Site Scripting (XSS), ElementsKit Elementor addons &lt; 3.0.4 - Contributor+ Stored XSS]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.0.7 [CVE-2024-1238, ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting, WordPress Elements kit Elementor addons Plugin <= 3.0.6 is vulnerable to Cross Site Scripting (XSS), ElementsKit Elementor addons &lt; 3.0.7 - Contributor+ Stored XSS]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.0.7 [CVE-2024-2047, ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw, WordPress Elements kit Elementor addons Plugin <= 3.0.6 is vulnerable to Local File Inclusion, ElementsKit Elementor addons &lt; 3.0.7 - Contributor+ Local File Inclusion]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.1.0 [CVE-2024-2803, ElementsKit Elementor addons <= 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget, WordPress Elements kit Elementor addons Plugin <= 3.0.7 is vulnerable to Cross Site Scripting (XSS)]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.0.7 [CVE-2024-32505, WordPress Elements kit Elementor addons Plugin <= 3.0.6 is vulnerable to Cross Site Scripting (XSS), EUVD-2024-30307, ElementsKit Elementor addons Lite <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.1.1 [CVE-2024-3499, ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module, WordPress Elements kit Elementor addons Plugin <= 3.1.0 is vulnerable to Local File Inclusion]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.1.3 [CVE-2024-3650, ElementsKit Elementor addons 3.0.7 - 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget, WordPress Elements kit Elementor addons Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.2.0 [CVE-2024-37255, WordPress Elements kit Elementor addons Plugin <= 3.1.4 is vulnerable to Broken Access Control, Elements kit Elementor addons <= 3.1.4 - Missing Authorization]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.2.1 [CVE-2024-6455, WordPress Elements kit Elementor addons Plugin <= 3.2.0 is vulnerable to Sensitive Data Exposure, ElementsKit Elementor addons <= 3.2.0 - Unauthenticated Information Exposure via ekit_widgetarea_content Function]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.2.8 [CVE-2024-8546, WordPress Elements kit Elementor addons Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS), ElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.3.0 [CVE-2024-10091, ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget, WordPress Elements kit Elementor addons Plugin <= 3.2.9 is vulnerable to Cross Site Scripting (XSS)]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.4.1 [CVE-2025-1005, WordPress Elements kit Elementor addons Plugin <= 3.4.0 is vulnerable to Cross Site Scripting (XSS), ElementsKit Elementor addons <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget, EUVD-2025-1963]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.4.1 [CVE-2025-0968, ElementsKit Elementor addons <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function, EUVD-2025-4703]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.4.8 [CVE-2024-11180, ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting, EUVD-2024-54336]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.5.3 [CVE-2025-4479, ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget, EUVD-2025-18679]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.5.3 [CVE-2025-3614, ElementsKit Elementor Addons and Templates <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Widget, EUVD-2025-22550]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.7.9 [CVE-2026-23693, ElementsKit Elementor addons Lite < 3.7.9 - Missing Authorization]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.8.0 [CVE-2026-2600, ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] < 3.9.0 [CVE-2026-4362, ElementsKit Elementor Addons <= 3.8.2 - Missing Authorization to Unauthenticated Widget Content Overwrite]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] <= 3.9.6 (unfixed) [CVE-2026-49053, ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 3.9.6 - Missing Authorization, ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor &lt;= 3.9.6 - Missing Authorization]
• ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor [elementskit-lite] <= 3.9.6 (unfixed) [CVE-2026-49052, ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 3.9.6 - Missing Authorization, ElementsKit Elementor Addons – Advanced Widgets &amp; Templates Addons for Elementor &lt;= 3.9.6 - Missing Authorization]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• Ultimate Addons for Elementor — 2000000+ active installs — max PHP 8.4
• Essential Addons for Elementor – Popular Elementor Templates & Widgets — 2000000+ active installs — max PHP 8.4
• Premium Addons for Elementor – Powerful Elementor Templates & Widgets — 700000+ active installs — max PHP 8.4
• Royal Addons for Elementor – Addons and Templates Kit for Elementor — 600000+ active installs
• Happy Addons for Elementor — 400000+ active installs — max PHP 8.4