CVE-2026-14190
Sina Extension for Elementor < 3.10.2 - Reflected XSS
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request.
| Vendor | unknown |
| Product | sina extension for elementor |
| Published | Jul 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown sina extension for elementor
Be the first to know when new unknown vulnerabilities affecting unknown sina extension for elementor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Sina Extension for Elementor
0 < 3.10.2
References
Credits
Mustafa Ahmed WPScan