CVE-2026-111400

The PowerPack Addons for Elementor plugin (specifically powerpack-lite-for-elementor ) by IdeaBox Creations is vulnerable to Stored Cross-Site Scripting (XSS) . This issue arises from the Improper Neutralization of Input During Web Page Generation and affects versions from n/a through 3.1.0 . An ...

WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin PowerPack Addons for Elementor versions = 3.1.0...

WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Tang in WordPress Plugin PowerPack Lite for Beaver Builder versions = 1.3.1...

CVE-2026-111400: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

PT-2026-115596

Name of the Vulnerable Software and Affected Versions PowerPack Addons for Elementor versions prior to 3.1.1 Description Improper neutralization of input during web page generation leads to a Stored Cross-site Scripting XSS issue. Stored XSS occurs when an application receives data from a user an...

WordPress PowerPack Addons for Elementor: Cross-site Script Vulnerabilities

WordPress PowerPack Addons for Elementor 3.1.0 and earlier versions contain a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...

CVE-2026-108488

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

CVE-2026-108488 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

EUVD-2026-98358

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

CVE-2026-108488 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

CVE-2026-108488

The PowerPack Addons for Elementor plugin by IdeaBox Creations (specifically the powerpack-lite-for-elementor component) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in versions up to and including 3.1.0 . The root cause is the Improper Neutralization of Input During Web Pag...

WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin PowerPack Addons for Elementor versions = 3.1.0...

CVE-2026-108488: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

PT-2026-111319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

WordPress PowerPack Addons for Elementor: Cross-site Script Vulnerabilities

WordPress PowerPack Addons for Elementor 3.1.0 and earlier versions contain a cross-site scripting vulnerability. This vulnerability arises from improper input during web page generation, and could lead to storage-based cross-site scripting attacks...

@nx/powerpack-gcs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/gcs-cache (>=5.0.0, <=5.0.7)

@nx/gcs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-shared-fs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/shared-fs-cache (>=5.0.0, <=5.0.7)

@nx/shared-fs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

@fernir2/saas-kit (>=0.0.173, <=0.0.207), @fernir2/saas-kit-cli (>=0.1.38, <=0.1.40) +1 more potentially affected by CVE-2025-36852 +1 more via @nx/s3-cache (>=5.0.0, <=5.0.7)

@nx/s3-cache NPM version =5.0.0, =0.0.173, =0.1.38, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-azure-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/azure-cache (>=5.0.0, <=5.0.7)

@nx/azure-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: GHSA-VP3H-GHGH-JR7G...

@nx/powerpack-shared-fs-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2025-36852 +1 more via @nx/shared-fs-cache (>=5.0.0, <=5.0.7)

@nx/shared-fs-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2025-36852, CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...