Description
Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Roxnor | ElementsKit Elementor addons Lite | ≤ 4.0.5 | — |
Medium · 6.5
CVE-2026-94500
EUVD-2026-85482GHSA-75ff-j2wh-c8v2
WordPress ElementsKit Elementor addons Lite plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack