Sitekit

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Sitekit

Information

Software Type Plugin
Software Slug sitekit (view on wordpress.org)
Software Status Active
Software Author webvitaly
Software Website wordpress.org
Software Downloads 56,687
Software Active Installs 3,000
Software Record Last Updated July 11, 2026

6 Vulnerabilities

Submit a Vulnerability
Sitekit <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-58229
Sep 22, 2025
Researcher: zaim
Sitekit <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-50047
Jun 19, 2025
Researcher: Muhammad Yudha - DJ
Sitekit <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-30776
Mar 27, 2025
Researcher: Muhammad Yudha - DJ
Sitekit <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2024-29111
Mar 16, 2024
Researcher: CatFather
Sitekit <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe ' shortcode
6.4
CVE-2023-27628
Aug 28, 2023
Researcher: Kévin Mosbahi (Mika)
Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode
6.4
CVE-2023-5071
Aug 28, 2023
Researchers: István Márton, Alex Thomas
Title Status CVE ID CVSS Researchers Date
Sitekit <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Unpatched CVE-2025-58229 6.4 zaim September 22, 2025
Sitekit <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-50047 6.4 Muhammad Yudha - DJ June 19, 2025
Sitekit <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-30776 6.4 Muhammad Yudha - DJ March 27, 2025
Sitekit <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Patched CVE-2024-29111 6.4 CatFather March 16, 2024
Sitekit <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe ' shortcode Patched CVE-2023-27628 6.4 Kévin Mosbahi (Mika) August 28, 2023
Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode Patched CVE-2023-5071 6.4 István Márton, Alex Thomas August 28, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation