qi_addons_for_elementor vulnerabilities
CVEs whose affected-version data names the qi_addons_for_elementor package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-115183Low· 2.4Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget
The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding HTML entities in it, allowing users with the Contributor role and above to embed live HTML forms, including pass…
▾ SunlitEPSS 0.10%via CVEORG
CVE-2026-92249Medium· 6.1The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping
The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it p…
▾ Sunlitqodeinteractive · Qi Addons For ElementorEPSS 0.37%via NVD