Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab widget in all versions up to, and including, 3.7.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-04 | 2 | Disclosure2 |
| 2026-04-10 | 1 | PoC1 |
CVE-2026-2600 The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab wi… https://www.cve.org/CVERecord?id=CVE-2026-2600
Post summary
The post announces a stored XSS vulnerability (CVE‑2026‑2600) in the ElementsKit Elementor Addons plugin for WordPress, linked to the ekit_tab_title parameter.
https://atomicedge.io/cve-proof/cve-2026-2600-elementskit-lite-version-3-7-9-medium-vulnerability-proof-of-concept CVE-2026-2600 #WordPress plugin #vulnerability elementskit-lite #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge
Post summary
A Proof of Concept has been released for CVE-2026-2600 affecting Elementskit Lite, but no exploit tool, patch, or evidence of active exploitation is included.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-2600 - ElementsKit Elementor Addons and Templates <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Simple Tab Widget Intel Report: https://ift.tt/RuCOljT
Post summary
An alert announcing the newly disclosed CVE‑2026‑2600, identifying a stored XSS vulnerability in ElementsKit Elementor Addons up to version 3.7.9, with a reference to an intel report for additional details.