CVE-2026-66688

Ultimate Addons for Elementor versions up to 1.45.2 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk as it can lead to unauthorized actions on behalf of users or data theft. Website administrators using these versions should prioritize patching to mitigate potential exploitation.