CVE-2026-39500

The themesflat-addons-for-elementor plugin for WordPress contains a security flaw in versions up to 2.3.2, allowing malicious users with contributor privileges or higher to introduce unauthorized code into the site's content. This code can then be executed by visitors when they access affected pages, posing a risk of data theft and other potential issues. The vulnerability stems from inadequate measures to cleanse input data before displaying it on the website.

Based on public CVE data (MITRE/NVD).