Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-23511 EUVD-2024-21006GHSA-wfc4-5r82-w5fq

WordPress The Plus Addons for Elementor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Published Jan 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-Based XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.3.3.

Affected products

VendorProductAffectedFixed
POSIMYTH The Plus Addons for Elementor Page Builder Lite ≤ 5.3.3 —

References