{"uuid": "dbd6e380-e39f-45f6-a7fd-9b874f5b2fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108490", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117432764086871147", "content": "CVE-2026-108490 WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.110.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108490https://patchstack.com/database/wordpress/plugin/premium-addons-for-elementor/vulnerability/wordpress-premium-addons-for-elementor-plugin-4-11-110-cross-site-scripting-xss-vulnerability-2?_s_id=cve#LeapWorx #PremiumAddonsforElementor#CVE_2026_108490#bot", "creation_timestamp": "2026-10-13T08:56:16.738226Z"}