Medium severity6.1NVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
CVE-2026-14190
CVE-2026-14190
Description
The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <3.10.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.