Unrated severityNVD Advisory· Published Aug 18, 2024· Updated Apr 28, 2026

WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

CVE-2024-43342

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bdthemes/Ultimate Store Kit Elementor Addonsllm-fuzzy2 versions
<=1.6.4+ 1 more
- (no CPE)range: <=1.6.4
- (no CPE)range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/ultimate-store-kit/wordpress-ultimate-store-kit-elementor-addons-woocommerce-builder-edd-builder-elementor-store-builder-product-grid-product-table-woocommerce-slider-plugin-1-6-4-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000