6.5
Medium
CVE-2024-39649 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite.This issue affects Essential Addons for Elementor: from n/a through <= 5.9.26.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Essential Addons for Elementor 5.9 | earliest → 5.9.26 | No fix stated |
Other CVEs of Essential Addons for Elementor
The 15 CVEs of Essential Addons for Elementor →
CVE-2026-110898
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor…
6.4
Medium
CVE-2026-102394
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
6.5
Medium
CVE-2026-81777
Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing
5.3
Medium
CVE-2026-25440
Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions
5.3
Medium