PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Hotspots and Pricing Table Tooltip Size
- ID
- WPSEC-2026-1791
- Plugin
- PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) (powerpack-lite-for-elementor)
- Affected
- all versions before 3.1.3
- Remediation
- Update to 3.1.3 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
- Weakness
- CWE-79
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-27
- Attack surface
- PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) on WPSec AttackSurface
- Fix released
- Published
Description
The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tooltip size setting of the Image Hotspots and Pricing Table widgets in all versions up to, and including, 3.1.2, due to the value not being validated against its allowed options before the front-end script concatenates it into the tooltip's HTML class attribute. This makes it possible for authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page and the tooltip is displayed.
References
- https://wpsec.com/vuln/WPSEC-2026-1791/
- https://plugins.svn.wordpress.org/powerpack-lite-for-elementor/tags/3.1.3/
- https://wordpress.org/plugins/powerpack-lite-for-elementor/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS