11 matches found
CVE-2026-118500
The Cool FormKit Lite – Advanced Form Builder for Elementor WordPress plugin (versions ≤ 2.7.9 ) is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping of the _elementor_data.form_fields[].custom_id parameter. An attack...
EUVD-2026-113714
The Cool FormKit Lite – Advanced Form Builder for Elementor plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'elementordata.formfields.customid' parameter in all versions up to, and including, 2.7.9 due to insufficient input sanitization and output escaping. Thi...
WordPress Cool FormKit Lite – Advanced Form Builder for Elementor plugin <= 2.7.9 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Cool Formkit Lite versions = 2.7.9...
CVE-2026-97301
Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...
CVE-2026-97301 WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...
CVE-2026-97301
The Cool Formkit Lite WordPress plugin (versions
CVE-2026-97301 WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...
EUVD-2026-89935
Contributor Cross Site Scripting XSS in Cool Formkit Lite = 2.7.8 versions...
WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Cool Formkit Lite versions = 2.7.8...
