The vulnerability CVE-2026-39702 affects the Wealcoder Animation Addons for Elementor plugin (versions up to 2.6.1). It is a DOM-based cross-site scripting (XSS) flaw caused by improper input neutralization during web page generation. The CVSS v3.1 score is 6.5 (medium severity) with attack vector network, low attack complexity, low privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to data disclosure, modification, or denial of service. The attack requires user interaction and low privileges, limiting but not eliminating risk. The vulnerability impacts confidentiality, integrity, and availability as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure by restricting plugin usage or applying temporary mitigations if available from the vendor. Monitor official Wealcoder channels for updates.