Subscriber Cross Site Scripting Vulnerability in King Addons for Elementor by PatchStack

CVE-2026-48870

What is CVE-2026-48870?

A vulnerability has been identified in King Addons for Elementor, specifically versions equal to or lower than 51.1.62, where a Subscriber role user can exploit the application through Cross Site Scripting (XSS). This could lead to the injection of malicious scripts, compromising the integrity of the site and potentially allowing unauthorized access to sensitive information. It is crucial for users to update their plugins to mitigate the risks associated with this security flaw.

References