CVE-2026-125743mediumCWE-79

CVE-2026-125743: medium-severity vulnerability in WPVibes Elementor Addon Elements

WordPress Elementor Addon Elements plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Elementor Addon Elements

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Stored XSS.This issue affects Elementor Addon Elements: from n/a through 1.5.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
WPVibes · Elementor Addon Elements
Related CVEs — WPVibes Elementor Addon Elements

In the same product, most dangerous first.

CVE-2024-47361MEDIUMWordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-30422MEDIUMWordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-29107MEDIUMWordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-119465MEDIUMWordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2024-47366MEDIUMWordPress Elementor Addon Elements plugin <= 1.13.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-28131MEDIUMWordPress Elementor Addon Elements plugin <= 1.14.4 - Sensitive Data Exposure vulnerabilityEPSS 0.3%