CVE-2026-11767 | Elementor Free Builder for Elementor Plugin up to 1.6.6 on WordPress Contact Form cross site scripting

A vulnerability was found in Elementor Free Builder for Elementor Plugin up to 1.6.6 on WordPress. It has been classified as problematic. Affected is an unknown function of the component Contact Form. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-11767. It is possible to initiate the attack remotely. There is no exploit available.