Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-121777 EUVD-2026-119248GHSA-4vxc-v48g-jxpc

WordPress Cool Formkit Lite plugin <= 2.7.10 - Content Injection vulnerability

Published Nov 7, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor-form allows Code Injection.This issue affects Cool Formkit Lite: from n/a through 2.7.10.

Affected products

VendorProductAffectedFixed
Cool Plugins Cool Formkit Lite ≤ 2.7.10 —

References