网安资讯详情 - SecLens 情报雷达

CVE-2026-11767 | Elementor Free Builder for Elementor Plugin up to 1.6.6 on WordPress Contact Form cross site scripting

来源： vuldb · 发布时间 2026-07-21 14:58 (UTC+08:00) · 抓取时间 2026-07-21 15:01 (UTC+08:00)

原文链接

摘要

A vulnerability was found in <a href="https://vuldb.com/product/elementor:free_builder_for_elementor_plugin">Elementor Free Builder for Elementor Plugin up to 1.6.6</a> on WordPress. It has been classified as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected is an unknown function of the component <em>Contact Form</em>. The manipulation leads to cross site scripting. This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-11767">CVE-2026-11767</a>. It is possible to initiate the attack remotely. There is no exploit available.

标签

• CVE-2026-11767

扩展字段

{
  "raw_pub_date": "Tue, 21 Jul 2026 08:58:46 +0200"
}