Description
Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Plugin Devs | Blog, Posts and Category Filter for Elementor | ≤ 2.1.0 | — |
High · 7.1
CVE-2026-40806
EUVD-2026-93043GHSA-65f4-5hwr-wvhw
WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack