CVE-2026-110510

LOWCVSS 3.5 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow users with the author role and above to inject iframe and form elements into published pages.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-345

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-24: 110-24
Referenced assets1 URL
By indicator
Full discourse1 post
  • 株式会社mgn@mgn_jpn

    🛠 Essential Addons for Elementor の脆弱性が修正されました(深刻度 中) 200万サイト以上が利用 / CVSS 6.4 6.8.7 に更新してください https://shindan.m-g-n.me/alerts/cve-2026-110510/

    01010357
    466 followersView on X

Explore more