CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-15156 | Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.7.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 6.7.0 | 6.7.0 | 2026-07-20 | — |
The Essential Addons for Elementor plugin, up to version 6.6.11, is susceptible to stored cross-site scripting (XSS) attacks when handling Reading Progress Global Color Settings. Authenticated users with at least contributor permissions can inject malicious scripts that will run in any user's browser when they view the affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.