Now officially on WordPress.org

CVE Database / CVE-2026-13344

CVE

CVE-2026-13344 — Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.10

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-13344 Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.10 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 6.6.10 6.6.10 2026-07-30 —

CVE-2026-13344

The Essential Addons for Elementor plugin, versions 6.6.10 and below, is susceptible to stored cross-site scripting (XSS) attacks due to inadequate input sanitization and output escaping mechanisms. Authenticated users with contributor permissions or higher can inject malicious scripts that will run in other users' browsers when they view the affected pages.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings