6.5
Medium
CVE-2026-94168 Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions
Description
Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Premium Addons for Elementor 4.11 | earliest → 4.11.105 | No fix stated |
References
- patchstack.com patchstack.com
Timeline
- Published
- Last modified
Other CVEs of Premium Addons for Elementor
The 34 CVEs of Premium Addons for Elementor →
CVE-2026-62078
Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions
6.5
Medium
CVE-2025-69300
Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows…
5.4
Medium
CVE-2025-68494
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for…
5.3
Medium
CVE-2024-11937
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
6.4
Medium