CVE-2026-12141
MEDIUMCVSS v3.1: 4.9 · EPSS: 0.0019 (9.1 percentile)
Source data as of:
At a glance
- Severity
- MEDIUM
- CVSS
- 4.9 v3.1 · NVD
- EPSS
- 0.0019 (9.1 percentile) · FIRST.org
- CISA KEV
- No
- Type
- XSS · NVD CWE
- Attack conditions (CVSS vector)
- NetworkNo user interaction · Source: NVD Vector
- Published
- 2026-07-11 · Modified: 2026-07-11
- References
- Jump to references (5)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'premium_tooltip_text' parameter in all versions up to, and including, 4.11.84 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is specifically triggered when an administrator or higher-privileged user opens the affected post in the Elementor editor, as the raw unescaped output occurs via the print_template() method registered on the 'elementor/section/print_template' hook rather than on the public-facing frontend.
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.
- Reference https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/tags/4.11.82/addon…
- Reference https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/tags/4.11.82/addon…
- Reference https://plugins.trac.wordpress.org/browser/premium-addons-for-elementor/tags/4.11.82/addon…
- Reference https://plugins.trac.wordpress.org/changeset?reponame=&old=3597629%40premium-addons-for-el…
- Vendor advisory https://www.wordfence.com/threat-intel/vulnerabilities/id/867a0742-4fa9-4473-8d51-9abb6ec3…