Description
Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bhavin Thummar | Product Filter Widget for Elementor | ≤ 1.0.6 | — |
High · 7.1
CVE-2026-45437
EUVD-2026-36840GHSA-74gf-g3qr-4w7c
WordPress Product Filter Widget for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack