Live › vulnerability › CVE-2026-114177
Go to dashboardThe Xpro Elementor Addons WordPress plugin, versions through 1.7.10, has a cross-site request forgery flaw. A logged-in site admin who opens a malicious page could be tricked into making changes to the site without knowing.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed plugin version in WordPress admin under Plugins, or run wp plugin get xpro-elementor-addons --field=version
Update xpro-elementor-addons to a version later than 1.7.10; the patched version number is unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This issue affects Xpro Elementor Addons: from n/a through 1.7.10.
This page as .md · .json · in your agent: get_signal("CVE-2026-114177")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.