Sign in

6.5 Medium

CVE-2026-66574 Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions

Description

Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions.

Affected products and versions

Product	Affected versions	Fixed in
Element Pack Elementor Addons 8.8	earliest → 8.8.3	No fix stated

The 13 CVEs of Element Pack Elementor Addons →

CVE-2026-108478 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element… 6.5 Medium CVE-2026-105873 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element… 6.5 Medium CVE-2026-105871 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element… 6.5 Medium CVE-2026-65502 Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions 5.3 Medium

Do you use Element Pack Elementor Addons?

Track this CVE Watch Element Pack Elementor Addons Check my SBOMs

www.cveye.io/en/cve/CVE-2026-66574

Timeline

Published September 17, 2026
Last modified September 19, 2026

References

patchstack.com patchstack.com

Track this CVE