What is GHSA-282g-jjg9-h9cq?

GHSA-282g-jjg9-h9cq is a security advisory published by GitHub Security Advisories with Low severity. The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag...

Which CVE IDs does GHSA-282g-jjg9-h9cq cover?

GHSA-282g-jjg9-h9cq covers the following CVE IDs: CVE-2026-110510. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-282g-jjg9-h9cq?

GHSA-282g-jjg9-h9cq has a CVSS v3 base score of 3.5, published by GitHub Security Advisories.

GHSA-282g-jjg9-h9cqLowCVSS 3.5

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag...

Vendor

GitHub Security Advisories

Published

October 23, 2026

Last Modified

October 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-110510 →

📋 Description

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow users with the author role and above to inject iframe and form elements into published pages.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110510
https://wpscan.com/vulnerability/ae0793fa-0223-40d9-836e-f9c6a0fbf80f
https://github.com/advisories/GHSA-282g-jjg9-h9cq