Skip to content
fr Sign in
3.5 Low

CVE-2026-110510 The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of…

Description

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow users with the author role and above to inject iframe and form elements into published pages.

Affected products and versions

Product Affected versions Fixed in
Essential Addons for Elementor 6.8 earliest → < 6.8.7 6.8.7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Essential Addons for Elementor

The 10 CVEs of Essential Addons for Elementor →
CVE-2026-110808 The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role… 4.2 Medium CVE-2026-110508 The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement… 5.3 Medium CVE-2026-110509 The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or meta query an… 5.3 Medium CVE-2026-110537 The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the… 3.8 Low
Track this CVE