Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-85302

WordPress WPKoi Templates for Elementor plugin <= 3.7.2 - Cross Site Scripting (XSS) vulnerability

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WPKoi WordPress Themes WPKoi Templates for Elementor

Default version status: unaffected

  • n/a to ≤ 3.7.2affected

References