Unrated severityNVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
Sina Extension for Elementor < 3.10.2 - Reflected XSS
CVE-2026-14190
Description
The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.
Affected products
1- Range: <3.10.2
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/9b855913-a55e-469d-b3cd-324c31b0d4d8/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.