CVE-2026-73361

The vulnerability allows unauthenticated cross-site scripting (XSS) attacks in Recipe Card Blocks for Gutenberg and Elementor versions up to 3.4.18, potentially enabling attackers to execute malicious scripts in the context of users' browsers. This could lead to data theft, session hijacking, or defacement of websites. Organizations using these versions should prioritize patching to mitigate the risk of exploitation.