CVE-2026-5162

creationtimestamp| type| source ---|---|--- 2026-04-17 06:30:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjocfdxviq2f 2026-04-17 14:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjp5c52pil27...

CVE-2026-5162 Royal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed Widget

The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagramfollowtext' setting in all versions up to, and including, 1.7.1056 due to insufficient input sanitization and output escaping. This makes it possible for...