CVE-2026-19217

The vulnerability CVE-2026-19217 affects the Royal Addons for Elementor WordPress plugin, specifically versions prior to 1.7.1065. The root cause is that a widget setting used to build an HTML tag is not validated before output, enabling Stored Cross-Site Scripting (Stored XSS) by users with the ...