CVE-2026-4790 | leap13 Premium Addons for Elementor Plugin up to 4.11.70 on WordPress versions custom_svg cross site scripting

A vulnerability, which was classified as problematic, was found in leap13 Premium Addons for Elementor Plugin up to 4.11.70 on WordPress. This affects the function versions. The manipulation of the argument custom_svg results in cross site scripting.

This vulnerability is reported as CVE-2026-4790. The attack can be launched remotely. No exploit exists.