Description
Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPZOOM | WPZOOM Addons for Elementor | ≤ 1.3.4 | — |
High · 7.1
CVE-2026-39597
EUVD-2026-37590GHSA-fvw6-3cq9-pqx8
WordPress WPZOOM Addons for Elementor plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack