CVE-2026-84896

CVE-2026-84896 affects the King Addons for Elementor WordPress plugin in versions prior to 51.1.77 . The vulnerability is a Stored XSS in the Magazine Grid Widget , caused by an unescaped widget display-style setting being output in an HTML attribute. Any user with Contributor role or higher can ...

WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget vulnerability discovered by Webbernaut in WordPress Plugin Royal Elementor Addons versions = 1.3.980...