PowerPack Addons for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Gradient Background Colors
- ID
- WPSEC-2026-0861
- Plugin
- PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) (powerpack-lite-for-elementor)
- Affected
- all versions before 3.1.1
- Remediation
- Update to 3.1.1 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
- Weakness
- CWE-79
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-13
- Attack surface
- PowerPack Addons for Elementor on WPSec AttackSurface
- Fix released
- Published
Description
The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Animated Gradient Background extension's color and angle settings in all versions up to, and including, 3.1.0, due to insufficient input validation and output escaping. The values were not validated and were printed unescaped in the extension's Elementor editor template and repeater title. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts that will execute whenever a user, such as an administrator, opens the affected page in the Elementor editor.
References
- https://wpsec.com/vuln/WPSEC-2026-0861/
- https://plugins.svn.wordpress.org/powerpack-lite-for-elementor/tags/3.1.1/
- https://wordpress.org/plugins/powerpack-lite-for-elementor/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS