What is CVE-2026-14190?
CVE-2026-14190: Reflected XSS vulnerability in Sina Extension for Elementor plugin versions below 3.10.2. An unauthenticated AJAX handler improperly reflects user input into HTML response without escaping, allowing cross-site scripting attacks. Users should update to version 3.10.2 or later.
Azərbaycanca: CVE-2026-14190: Sina Extension for Elementor WordPress plugin-inin 3.10.2-dən əvvəlki versiyalarında aşkar edilib. Autentifikasiya olunmamış AJAX handler-də giriş məlumatı HTML cavabına düzgün escap edilmədən əks olunur ki, bu da istənilən şəxsin brauzerində ixtiyari JavaScript icrasına (Reflected XSS) səbəb ola bilər. İstifadəçilər plaqini ən azı 3.10.2 versiyasına yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
What impact can CVE-2026-14190 have in the Sina Extension for Elementor plugin?
This vulnerability allows unauthenticated Reflected XSS attacks, meaning an attacker can execute arbitrary JavaScript in a victim's browser.
How to protect against CVE-2026-14190?
Users should update the Sina Extension for Elementor plugin to at least version 3.10.2.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.