CVE-2026-14841

CVE-2026-14841: King Addons for Elementor < 51.1.76 - Reflected XSS via Posts Grid Widget

Vendor Unknown
Product King Addons for Elementor
Published August 2, 2026
Last update August 3, 2026

CVSS base score

What the vulnerability does

01Description

The King Addons for Elementor WordPress plugin before 51.1.76 does not escape a user-supplied grid setting before reflecting it into an HTML attribute in an unauthenticated AJAX response, allowing attackers to execute arbitrary JavaScript in the browser of a visitor who is tricked into loading a crafted page.

Key dates

02Disclosure timeline

August 2, 2026 CVE published
August 3, 2026 Record updated