CVE-2026-65505 Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions

Description

Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.

Affected products and versions

Product	Affected versions	Fixed in
Ultimate Store Kit Elementor Addons 3.0	earliest → 3.0.5	No fix stated

Other CVEs of Ultimate Store Kit Elementor Addons

The 12 CVEs of Ultimate Store Kit Elementor Addons →

CVE-2026-25403 Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions 6.5 Medium CVE-2026-65503 Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions 6.5 Medium CVE-2025-69336 Missing Authorization vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Exploiting… 4.3 Medium CVE-2025-58017 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes… 6.5 Medium