PT-2026-25306 · Liton Arefin · Master Addons For Elementor

Published 2026-03-13 · Updated 2026-03-14 · CVE-2026-32462

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Liton Arefin Master Addons for Elementor versions through 2.1.3

Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the execution of malicious scripts within the context of the user's browser. The issue affects Master Addons for Elementor.

Recommendations Update Liton Arefin Master Addons for Elementor to a version newer than 2.1.3.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-32462

Affected Products

Master Addons For Elementor

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-32462 · Security Note
• https://t.me/CVEtracker/47361 · Telegram Post
• https://twitter.com/CVEnew/status/2032831393068364200 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/master-addons/vulnerability/wordpress-master-addons-for-elementor-plugin-2-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2032598261547012534 · Twitter Post