CVE-2026-111400 IdeaBox Creations CVE debrief

Who should care

Defenders responsible for WordPress installations with the PowerPack Addons for Elementor plugin should assess exposure and prioritize updates to mitigate this vulnerability. This includes reviewing plugin versions, monitoring for suspicious activity, and implementing compensating controls for exposed systems. Security teams should track exceptions, retest remediated assets, and close the item only after evidence is documented.

Why it matters

CVE-2026-111400 is a Stored XSS vulnerability in PowerPack Addons for Elementor plugin versions up to 3.1.0. Defenders should prioritize updates to version 3.1.1 or later and monitor for suspicious activity.

• Potential injection of malicious scripts into web pages
• Possible compromise of user sessions or sensitive data
• Required verification of plugin version and exposure
• Necessity to monitor web application logs for suspicious activity

Technical summary

The PowerPack Addons for Elementor plugin has a Stored XSS vulnerability (CVE-2026-111400) in versions up to 3.1.0. This issue arises from improper neutralization of input during web page generation. The vulnerability allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. Defenders should prioritize updating to version 3.1.1 or later to mitigate this vulnerability. The CVE record and source item provide additional context on the vulnerability, but technical details are limited.

Defensive priority

Defenders should prioritize updating to version 3.1.1 or later to mitigate this vulnerability.

Recommended defensive actions

• Update PowerPack Addons for Elementor to version 3.1.1 or later
• Review and monitor web application logs for suspicious activity
• Implement Content Security Policy (CSP) to mitigate XSS attacks
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the vulnerability, including its existence in versions up to 3.1.0 of the PowerPack Addons for Elementor plugin. The vulnerability allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. Defenders should verify plugin versions and exposure, and monitor for suspicious activity. The source item provides additional context on the vulnerability, but details are limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.