CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-15145 | Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.7.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 6.7.0 | 6.7.0 | 2026-07-20 | — |
The Essential Addons for Elementor is susceptible to Stored Cross-Site Scripting when using the Fancy Text Widget, affecting all versions up to 6.6.11. Authenticated users with at least contributor privileges can inject malicious scripts that run on affected pages viewed by other users.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.