TI-2026-01096 CVE-2026-1397 · GHSA-qhv2-5w8w-mqqm
Cross-site scripting in peacefulqode PQ Addons – Creative Elementor Widgets
Priority LOW 28
The PQ Addons – Creative Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget attributes in all versions up to, and including, 1.0.0 due to insufficient input sanitization and ou…