CVE-2026-125743

WPVibes Elementor Addon Elements stored XSS in plugin page content

medium · 6.5

WPVibes Elementor Addon Elements

Published Nov 11, 2026, 12:40 UTC

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through 1.5.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.