CVE-2026-125762mediumCWE-79

CVE-2026-125762: medium-severity vulnerability in LeapWorx Premium Addons for Elementor

WordPress Premium Addons for Elementor plugin <= 4.11.116 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Premium Addons for Elementor

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.116.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
LeapWorx · Premium Addons for Elementor
Related CVEs — LeapWorx Premium Addons for Elementor

In the same product, most dangerous first.

CVE-2026-109890MEDIUMWordPress Premium Addons for Elementor plugin <= 4.11.110 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-108482MEDIUMWordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-103084MEDIUMWordPress Premium Addons for Elementor plugin <= 4.11.109 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-108490MEDIUMWordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%