What is GHSA-j952-f3p9-h3jg?

GHSA-j952-f3p9-h3jg is a security advisory published by GitHub Security Advisories with unknown severity. The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value...

Which CVE IDs does GHSA-j952-f3p9-h3jg cover?

GHSA-j952-f3p9-h3jg covers the following CVE IDs: CVE-2026-14190. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-j952-f3p9-h3jgunknown

The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value...

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-14190 →

📋 Description

The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14190
https://wpscan.com/vulnerability/9b855913-a55e-469d-b3cd-324c31b0d4d8
https://github.com/advisories/GHSA-j952-f3p9-h3jg