Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-96829

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1…

Risk score
40/100
CVSS
6.5 v3.1
Exploit chance (30 days)
0.2%
Published
30 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 6.5 medium

References

Original description

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

Last activity 30 Sep 2026. Patch Forecast updates every hour.