WDesignKit – AI Templates, Widget Builder & MCP Workflow for WordPress

WDesignKit – AI Templates, Widget Builder & MCP Workflow for WordPress has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for WDesignKit – AI Templates, Widget Builder & MCP Workflow for WordPress has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. WDesignKit – AI Templates, Widget Builder & MCP Workflow for WordPress is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all WDesignKit – AI Templates, Widget Builder & MCP Workflow for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2024-53811

WDesignkit <= 1.0.40 - Authenticated (Administrator+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records
WDesignKit – AI Templates, Widget Builder & MCP Workflow for WordPress banner
Latestv2.6.5

WDesignKit – AI Templates, Widget Builder & MCP Workflow for WordPress

POSIMYTH

Author

POSIMYTH

4.8(12)
96/100
Last Updated
2026-08-21 (23d ago)
Active Installs
30,000+
Downloads
734,171
Requires WP
6.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2024-01-22 (3y ago)

WDesignKit is the ultimate designer tool for WordPress, empowering designers to create stunning websites in minutes. It’s the fastest way to build a WordPress website, making it a must-have tool for every WordPress designer or agency owner. Build faster with AI Templates, build widgets and code snippets with your favorite AI tool via MCP, and connect WDesignKit to compatible AI assistants through the Model Context Protocol (MCP) to streamline your WordPress workflow. VISIT WDESIGNKIT WEBSITE Quick Navigation Links Visit Website | Video Tutorials | Documentations | Roadmap | Join Facebook Community | Free Support | Premium Support | AI Chat (Instant Answers) Complete WDesignKit Features Explained Under 4 Mins Watch Now What is WDesignKit ? AI Templates: Import Elementor & Gutenberg Templates Pre-Populated with AI-Generated Content, No More Replacing Placeholder Text Line by Line AI Widget Builder: Describe the widget you need in plain language, and your favorite AI tool, connected via MCP, builds a production-ready Elementor, Gutenberg, or Bricks widget. AI Code Snippets: Generate custom WordPress code snippets through a conversation with your favorite AI tool, connected via MCP, no manual coding or copy-pasting required. MCP Workflow: Connect WDesignKit to AI Assistants via Model Context Protocol (MCP) so You Can Design, Build, and Manage WordPress Sites Through a Chat Workflow 1600+ Elementor Page Templates, Kit & Sections: Ready-Made, Professionally Designed Pages, Kits & Sections You Can Import into Elementor in One Click 1500+ Gutenberg Templates & Patterns: Full Page Layouts & Reusable Patterns Built for the Native WordPress Block Editor 110+ Elementor Widgets Library: Ready-to-Use Elementor Widgets Covering Sliders, Forms, Galleries, Content Blocks & More 30+ Gutenberg Blocks Library: Pre-Built Gutenberg Blocks to Extend the Native Block Editor Without Extra Plugins 80+ Bricks Elements Library: Pre-Built Elements Ready to Drop into Any Bricks Builder Layout Elementor Widget Builder: Turn Your Custom HTML, CSS & JS Code into a Fully Working Elementor Widget, No Elementor Widget Development Experience Needed Gutenberg Blocks Builder: Turn Your Custom Code into a Native Gutenberg Block Ready to Use in the Block Editor Nexter Blocks Builder: Turn Your Custom Code into a Reusable Nexter Block Bricks Elements Builder: Turn Your Custom Code into a Reusable Bricks Element 1-Click Widget Converter: Easily Convert Elementor Widgets to Gutenberg Blocks or Bricks Elements & Vice Versa, No Rebuilding from Scratch When You Switch Builders Cloud Workspace: Collaborate with your Team & Store Page Templates, Figma Designs or Custom Widgets on Cloud 60+ Figma Designed Websites: Editable Figma Website Kits with Auto Layout, Ready to Hand Off to Design Directly into a Live Build 🔍 OUR PRODUCTS 💰 The Plus Addons for Elementor – 120+ Elementor Widgets to create Elementor Widgets Easily. 💰 NexterWP Theme, Blocks & Extensions – Best Starter Theme for WordPress with 22+ WordPress Extension & 90+ Gutenberg Blocks. 💰 UiChemy – Figma to Elementor & Bricks Convertor – Convert your Figma Templates In Live Elementor Website using our FREE Figma Plugin. External services wdesignkit.com API : This API is used to fetch plugin-related data for onboarding and updates. It sends the plugin version and identifier during activation, updates, or specific plugin-related requests. For more details, you can review the Privacy Policy and Terms of Service. api.wordpress.org : This API retrieves plugin metadata and compatibility information from WordPress.org. It sends the plugin identifier during updates or when checking compatibility. More information can be found in the Privacy Policy and Terms of Service. api.posimyth.com : Usage analytics. Off by default; submitting the deactivation feedback form also sends it, plus your admin email if you tick the contact box. Terms · Privacy · what’s shared AI Templates : This feature sends your prompt to WDesignKit’s AI service to generate ready-to-use template content. No content is sent unless you actively use this feature. For more details, review the Privacy Policy and Terms of Service. Model Context Protocol (MCP) : The AI Widget Builder, AI Code Snippets, and MCP Workflow features connect WDesignKit to a third-party AI tool of your choice (such as Claude) over the Model Context Protocol. Your prompts, and where applicable your existing widget/template code, are sent to that AI tool to generate the result. This only happens when you actively connect and use an AI tool via MCP; review the privacy policy and terms of the AI tool you connect, in addition to WDesignKit’s Privacy Policy and Terms of Service.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C