CVE-2026-40806

HIGHCVSS 7.1

Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions.

Published 2026-10-06 · last modified 2026-10-06

Full record at NVD ↗

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.