A Cross Site Scripting (XSS) vulnerability exists in the WordPress Better Post & Filter Widgets for Elementor plugin versions up to 1.9.1. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability affects WordPress installations using the Better Post & Filter Widgets for Elementor plugin. Defenders should assess exposure and prioritize p [truncated]
The CVE-2026-115949 vulnerability affects the WordPress Better Post & Filter Widgets for Elementor plugin, versions up to 1.9.1. This vulnerability is classified as a Broken Access Control issue, with a CVSS score of 6.5 and a severity of MEDIUM. The vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels. Defenders responsible for WordPress installations using the Better [truncated]
