WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.24.

Üreticinin çözüm notu (İngilizce)

Update the WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin to the latest available version (at least 2.0.25).

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…-2-0-24-cross-site-scripting-xss-vulnerability Diğer

Kayıt geçmişi

1. 28 Eki 2026 16:00Yayımlandı

İlgili açıklar

• 7,1 CVE-2026-115612WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability
• 7,1 CVE-2026-115596WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability
• 6,5 CVE-2026-115957WordPress WP Discussion Board plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability
• 7,1 CVE-2026-115606WordPress DXP ToolKit plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
• 7,1 CVE-2026-115609WordPress GetPaid plugin <= 2.8.62 - Cross Site Scripting (XSS) vulnerability
• 8,6 CVE-2026-67073HCL BigFix AEX is affected by multiple security vulnerabilities.