Element Pack Elementor Addons < 8.7.13 Contributor+ DOM-Based Stored XSS (CVE-2026-14817)

wpscan.com 2026-08-02查看中文 →

Security AdvisoryCVE-2026-14817Mediumbdthemes

Affected:

Element Pack Elementor Addons < 8.7.13
bdthemes-element-pack-lite < 8.7.13

Fixed in:

8.7.13

Referenced CVEs: CVE-2026-14817

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Ninja Forms < 3.14.10 Unauthenticated Arbitrary Shortcode Execution via Query String (CVE-2026-15256) 2026-08-07 WP Hotel Booking <2.3.2 Unauthenticated PayPal Payment Bypass (CVE-2026-15152) 2026-08-07 WordPress Five Star Restaurant Reservations <2.7.23 Unauthenticated Payment Bypass via IDOR (CVE-2026-15147) 2026-08-07 RegistrationMagic < 6.0.9.5 Unauthenticated Payment Bypass via Amount-Blind PayPal Verification (CVE-2026-15208) 2026-08-07 WP Hotel Booking <2.3.3 Unauthenticated Price Manipulation Payment Bypass 2026-08-07

Offline Archive

Offline screenshot & PDF are Pro-exclusive