CVE-2026-81813 Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking only their elements and attributes, allowing users with the Contributor role and above to store a payload which breaks out when the SVG is rendered inline in a page and executes i...

EUVD-2026-107083

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking only their elements and attributes, allowing users with the Contributor role and above to store a payload which breaks out when the SVG is rendered inline in a page and executes i...

CVE-2026-81813

The Elementor Website Builder WordPress plugin, in versions before 4.3.5 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is an insufficient sanitizer that fails to scrub the text content of SVG files, focusing only on elements and attributes. This allows users with Con...

WordPress Elementor Website Builder plugin < 4.3.5 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Elementor Website Builder versions 4.3.5...

WordPress Elementor Website Builder plugin < 4.3.5 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by NGUYỄN ĐỨC HÒA in WordPress Plugin Elementor Website Builder versions 4.3.5...

CVE-2026-81812 Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route, allowing users with the Author role and above to upload a file containing JavaScript, which will run in the browser of any user who opens it. Exploitation requires unfiltered fi...

CVE-2026-81812 Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route, allowing users with the Author role and above to upload a file containing JavaScript, which will run in the browser of any user who opens it. Exploitation requires unfiltered fi...

CVE-2026-81812

The Elementor Website Builder WordPress plugin (versions before 4.3.5 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is a failure to sanitize uploaded SVG files across all upload routes. This allows users with the Author role or higher to upload files containing malic...

EUVD-2026-107082

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route, allowing users with the Author role and above to upload a file containing JavaScript, which will run in the browser of any user who opens it. Exploitation requires unfiltered fi...

CVE-2026-81813 Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking only their elements and attributes, allowing users with the Contributor role and above to store a payload which breaks out when the SVG is rendered inline in a page and executes i...

PT-2026-120479

Name of the Vulnerable Software and Affected Versions Elementor Website Builder versions prior to 4.3.5 Description Insufficient sanitization of text content within SVG files allows users with the Contributor role and above to store a malicious payload. The issue occurs because the plugin only...

PT-2026-120490

Security Advisory Due to the critical PHP vulnerabilities CVE-2026-109618 and CVE-2016-109619, we have temporarily suspended potentially affected services, including our official website and https://t.co/74FnLhUods. Services will resume following the release of official PHP patches and verificati...

PT-2026-120478

The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route, allowing users with the Author role and above to upload a file containing JavaScript, which will run in the browser of any user who opens it. Exploitation requires unfiltered fi...

CVE-2026-112299

A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side...

CVE-2026-112299 smrealms smr Album Website AlbumEditProcessor.php isUrlReachable server-side request forgery

A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side...

CVE-2026-112299

A server-side request forgery (SSRF) vulnerability exists in the smrealms smr product within the Album Website component. The flaw is located in the isUrlReachable function of the file src/pages/Account/AlbumEditProcessor.php, where manipulating the Website argument allows for remote exploitation...

EUVD-2026-104596

A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side...

CVE-2026-112299 smrealms smr Album Website AlbumEditProcessor.php isUrlReachable server-side request forgery

A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side...

PT-2026-117640

Name of the Vulnerable Software and Affected Versions smrealms smr affected versions not specified Description A server-side request forgery exists in the Album Website component. A remote attacker can manipulate the Website argument within the isUrlReachable function located in the...

CVE-2026-112299: Server-Side Request Forgery (SSRF)

A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side...