Threat database

CVE-2026-109890 is a missing authorization vulnerability in LeapWorx Premium Addons for Elementor that affects versions from initial release up to 4.11.110. This flaw allows unauthorized users to exploit incorrectly configured access control security levels. The vulnerability has a medium severity with a CVSS score of 5.3, indicating limited impact on confidentiality and no impact on integrity or availability.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.110.

CVE-2026-108482 is a stored cross-site scripting (XSS) vulnerability in LeapWorx Premium Addons for Elementor. It affects versions from the initial release up to 4.11.110. The vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. The CVSS 3.1 base score is 6.5, indicating a medium severity level. Exploitation requires low privileges and user interaction, and it can impact confidentiality, integrity, and availability. No official patch or remediation information is provided in the source data.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109.