PatchTheCVEsktthemes vulnerabilities
Recent CVEs affecting sktthemes products. 14 tracked.
sktthemes has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 14. Most recent: 2025-05-19. Highest priority: CVE-2024-5091 (score 32/100).
- CVE-2025-48270 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsin
- CVE-2025-46243 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover
- CVE-2025-46235 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsin
- CVE-2025-3276 MEDIUM 6.4 UPGRADE The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scriptin
- CVE-2025-26998 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsin
- CVE-2025-26771 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsin
- CVE-2024-5091 HIGH 7.4 UPGRADE The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'
- CVE-2024-48036 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsin
- CVE-2024-44007 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsin
- CVE-2024-43995 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in s
- CVE-2024-43946 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in S
- CVE-2024-38674 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in S
- CVE-2024-13665 MEDIUM 6.4 UPGRADE The Admire Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'space' sh
- CVE-2024-10693 MEDIUM 4.3 UPGRADE The SKT Addons for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to,
FAQ
How do I fix sktthemes vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sktthemes being exploited right now?
None of the tracked sktthemes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sktthemes CVE should I patch first?
CVE-2024-5091 currently ranks highest (32/100): The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'.