Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-39702 EUVD-2026-20404GHSA-4pgf-vj9p-gr3j

WordPress Animation Addons for Elementor plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-elementor allows DOM-Based XSS.This issue affects Animation Addons for Elementor: from n/a through <= 2.6.1.

Affected products

VendorProductAffectedFixed
Wealcoder Animation Addons for Elementor ≤ 2.6.1 —

References