Skip to content
Sign in
6.8 Medium

CVE-2026-83541 The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before…

Description

The Sina Extension for Elementor WordPress plugin before 3.10.4 does not properly escape a Table widget setting before outputting it within an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
Sina Extension for Elementor 3.7 3.7.1 → < 3.10.4 3.10.4

Other CVEs of Sina Extension for Elementor

The 3 CVEs of Sina Extension for Elementor →
CVE-2026-14190 The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input… 6.1 Medium CVE-2021-24269 The “Sina Extension for Elementor” WordPress Plugin before 3.3.12 has several widgets that are vulnerable to stored… Not rated
Track this CVE