CVE-2026-115183
Last modified
CVE-2026-115183 is a vulnerability of currently unknown severity. The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding HTML entities in it, allowing users with the Contributor role and above to embed live HTML forms, including password fields that submit to an external host, into posts where WordPress would otherwise strip them..
Description
The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding HTML entities in it, allowing users with the Contributor role and above to embed live HTML forms, including password fields that submit to an external host, into posts where WordPress would otherwise strip them.
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Qi Addons For Elementor | < 1.11.2 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-115183?
How severe is CVE-2026-115183?
How do I fix CVE-2026-115183?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-11513A vulnerability was detected in itsourcecode Hospital Manage…6.3
- CVE-2026-11514A flaw has been found in itsourcecode Hospital Management Sy…6.3
- CVE-2026-11515A vulnerability has been found in SourceCodester Barangay Re…5.5
- CVE-2026-11516A vulnerability was found in UTT HiPER 2610G up to 3.0.0-171…5.5
- CVE-2026-11517A vulnerability was determined in UTT HiPER 2610G up to 3.0.…8.8
- CVE-2026-11518A vulnerability was identified in SourceCodester Inventory S…4.3
- CVE-2026-11519A security flaw has been discovered in SourceCodester Invent…6.3
- CVE-2026-1152A security vulnerability has been detected in technical-laoh…9.8
- CVE-2026-11520A weakness has been identified in SourceCodester Inventory S…3.5
- CVE-2026-115207A flaw was found in GNU patch. An attacker can achieve arbit…5.5
- CVE-2026-11521A security vulnerability has been detected in Mohammed-eid35…6.3
- CVE-2026-115214The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.…
Are you affected by CVE-2026-115183?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST