Zita Site Library for Elementor

Zita Site Library for Elementor has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 4 issues recorded for Zita Site Library for Elementor has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Zita Site Library for Elementor is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Zita Site Library for Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.9CVE-2024-37420

Zita Elementor Site Library <= 1.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

4 records


2026-01-28 00:00	Zita Site Library for Elementor <= 1.6.6 - Cross-Site Request Forgery Zita Site Library for Elementor <= 1.6.6	`CVE-2026-25319`	4.3 Medium	Nabil Irawan	Yes
2024-10-15 21:49	Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload Zita Site Library for Elementor <= 1.6.3	`CVE-2024-8921`	6.4 Medium	Francesco Carlucci	Yes
2024-06-28 00:00	Zita Elementor Site Library <= 1.6.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload Zita Site Library for Elementor <= 1.6.1	`CVE-2024-37420`	9.9 Critical	Majed Refaea	Yes
2024-06-24 00:00	Zita Elementor Site Library <= 1.6.2 - Missing Authorization to Page Creation and Options Modification Zita Site Library for Elementor <= 1.6.2	`CVE-2024-3249`	4.3 Medium	Lucio Sá	Yes

Showing 1–4 of 4 reports

Latestv1.6.7

Zita Site Library for Elementor

Author

wpzita

5.0(1)

100/100

Last Updated

2026-01-27 (8mo ago)

Active Installs

1,000+

Downloads

101,018

Requires WP

6.6+

Requires PHP

Tested up to

WP 6.9.7

Created

2018-10-01 (8y ago)

Zita site library is a addon plugin for Zita WordPress theme. This plugin contain 21+ ready to use sites for nearly all niches (like : corporate, store, agency, blog, portfolio, restaurant, wedding, construction, hospital, school, interior, car workshop, life coach, wine shop, barber shop, furniture shop, yoga, resume, charity, digital marketing etc ). You can import these sites with a single click. Please check doc for more info :

View on WordPress.org