CVE-2026-120850 | Elementor Website Builder Plugin up to 4.3.5 on WordPress cross site scripting

November 7, 2026 Yanac

A vulnerability has been found in Elementor Website Builder Plugin up to 4.3.5 on WordPress and classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-120850. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More