A vulnerability described as problematic has been identified in roxnor ElementsKit Elementor Addons Plugin up to 3.7.9 on WordPress. This issue affects some unknown processing of the component Simple Tab Widget. Such manipulation of the argument ekit_tab_title leads to cross site scripting.

This vulnerability is traded as CVE-2026-2600. The attack may be launched remotely. There is no exploit available.