WordPress plugin
Style Kits for Elementor security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All Style Kits for Elementor vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤2.6.5Update to 2.6.6 | CVE-2026-27364 | |
| Medium4.3 | Missing Authorization ≤2.6.5Update to 2.6.6 | CVE-2026-65484 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title ≤2.5.0Update to 2.6.0 | CVE-2026-6565 | |
| High8.8 | Cross-Site Request Forgery Bypass ≤1.8.0Update to 1.8.1 | CVE-2021-4401 |
- Medium4.3Missing Authorization
≤2.6.5Update to 2.6.6
- Medium4.3Missing Authorization
≤2.6.5Update to 2.6.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Kit Title
≤2.5.0Update to 2.6.0
- High8.8Cross-Site Request Forgery Bypass
≤1.8.0Update to 1.8.1
Style Kits for Elementor: common questions
Does Style Kits for Elementor have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Style Kits for Elementor: 1 high, 3 medium. None are known to affect version null.
How do I check which version of Style Kits for Elementor I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Style Kits for Elementor vulnerability?
CVE-2026-27364, published Aug 24, 2026: Style Kits for Elementor <= 2.6.5 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Style Kits for Elementor vulnerability listed in CISA KEV?
No. None of the known Style Kits for Elementor vulnerabilities is currently listed in the CISA KEV catalog.