Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.

Threats Tagged 'cve-2026-14817'

View all threats tagged with 'cve-2026-14817'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2026-14817

Threats Tagged 'cve-2026-14817'

Click on any threat for detailed analysis and mitigation recommendations

The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a… (CVE-2026-14817)CVE-2026-14817
0

The Element Pack Addons for Elementor WordPress plugin versions before 8.7.13 do not sanitize option values passed through certain data attributes. This allows users with contributor-level access or higher to inject arbitrary JavaScript that executes in the browser session of any visitor viewing the affected content. This vulnerability enables cross-site scripting (XSS) attacks via insufficient input sanitization in the plugin's front-end rendering process.

Join the discussion
CVE-2026-14817: CWE-79 Cross-Site Scripting (XSS) in Element Pack Addons for ElementorCVE-2026-14817
0

A Cross-Site Scripting (XSS) vulnerability exists in the Element Pack Addons for Elementor WordPress plugin before version 8.7.13. The plugin fails to sanitize option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser. This flaw allows users with contributor-level access or higher to inject arbitrary JavaScript, which executes in the session of any visitor viewing the affected content.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Tag: cve-2026-14817
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses