CVE-2026-118500 | Coolplugins Cool FormKit Lite Plugin up to 2.7.9 on WordPress _elementor_data.form_fields[].custom_id cross site scripting

October 30, 2026 Yanac

A vulnerability marked as problematic has been reported in Coolplugins Cool FormKit Lite Plugin up to 2.7.9 on WordPress. This impacts an unknown function. Performing a manipulation of the argument _elementor_data.form_fields[].custom_id results in cross site scripting.

This vulnerability was named CVE-2026-118500. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More