PT-2026-6031 · Elementor+1 · Elementor+1

Knani Alaaeddine

·

Publicado

2026-02-03

·

Atualizado

2026-02-03

·

CVE-2026-1210

CVSS v3.1

6.4

Média

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Happy Addons for Elementor plugin versions up to and including 3.20.7
Description The Happy Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in the elementor data meta field. Authenticated attackers with Contributor-level access or higher can inject malicious web scripts into pages. These scripts will then execute whenever a user accesses the compromised page.
Recommendations Update the Happy Addons for Elementor plugin to a version later than 3.20.7.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-1210

Produtos afetados

Elementor
Happy Addons For Elementor