CVE-2026-120524

The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.4.8 . The flaw exists in the formData parameter due to insufficient input sanitization and output escaping. Specifically, an operator-precedence bug in handl...