CVE-2026-103084 LeapWorx CVE debrief

Who should care

Defenders responsible for WordPress installations using Premium Addons for Elementor, particularly those with user-generated content or untrusted input, should assess exposure and prioritize remediation.

Why it matters

CVE-2026-103084 is a Stored XSS vulnerability in Premium Addons for Elementor, a WordPress plugin. Defenders should assess exposure, prioritize remediation, and verify inventory for affected versions due to potential for Stored XSS attacks and limited information about exploitation status and remediation details.

• Potential for Stored XSS attacks via user-generated content
• Verification of inventory for affected Premium Addons for Elementor versions
• Remediation priority for exposed systems
• Further verification required for exploitation status and remediation details

Technical summary

The CVE-2026-103084 vulnerability is caused by improper neutralization of input during web page generation, allowing for Stored Cross-site Scripting (XSS) attacks. The affected product is Premium Addons for Elementor, a WordPress plugin, with versions from n/a through 4.11.109 being vulnerable. This vulnerability has a CVSS score of 6.5 and is classified as MEDIUM severity. Defenders should assess exposure, prioritize remediation, and verify inventory for affected versions due to potential for Stored XSS attacks and limited information about exploitation status and remediation details.

Defensive priority

Defenders should prioritize verifying inventory for affected Premium Addons for Elementor versions and assess exposure to potential Stored XSS attacks.

Recommended defensive actions

• Verify inventory for affected Premium Addons for Elementor versions
• Assess exposure to potential Stored XSS attacks
• Prioritize remediation for affected systems
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine affected versions, exploitation status, and remediation details. Defenders should verify inventory for affected Premium Addons for Elementor versions and assess exposure to potential Stored XSS attacks. The CVE Program and NVD entries offer initial insights but may not cover all aspects of the vulnerability or its mitigation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.