Executive brief
Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.
Junglewise Threat Intelligence
CVE-2026-94500: Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.
CVE-2026-94500 · Severity: medium · CVSS 6.5 · Published 2026-09-23