Threats tagged 'ghsa-74gv-xjcv-gwc2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-0673The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up Medium5.3EPSS 0.4%2026-08-06GCVE DatabaseCVE-2026-0673 The Element Pack Addons for Elementor WordPress plugin contains an Email Header Injection vulnerability in all versions up to and including 8.3.15. This flaw arises from insufficient sanitization of newline characters in user input processed by the `element_pack_contact_form` AJAX action, allowing unauthenticated attackers to inject arbitrary email headers into emails sent by the contact form. EPSS 0.4%Report on CVE-2026-0673 Vulnerability CWE-93 #ghsa-74gv-xjcv-gwc2	GCVE Database	2026-08-06

Page 1 of 1