CVE-2026-6127 - Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
CVE ID :CVE-2026-6127 Published : May 1, 2026, 5:29 a.m. | 33 minutes ago Description :The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4. This is due to insufficient input s
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Lee commends law enforcement for almost halving voice phishing damage
- [CYBER] Cyber-Fraud Fusion: Insights from the WTF Summit Panel
- [CYBER] Just started a full Ethical Hacking course on YouTube… here’s my honest experience so far
- [CYBER] No AI Model Can Carry a Creative Project End to End. The HCB Just Proved It.
- [CYBER] DeFi protocol Carrot becomes first casualty of $285M Drift exploit
- [CYBER] Advice from graduates or industry experts