CVE-2026-114707

The WordPress JetElements For Elementor plugin (versions up to and including 2.9.2.5 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. This issue is caused by the improper neutralization of input during web page generation within the jet-elements component. An attacker could p...