{"uuid": "cfd3acdb-bdf6-47fd-8a62-fdc59c400880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100180", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwwwabccrv2o", "content": "Jeg Kit for Elementor, a WordPress add-on on 300,000+ sites, has an unauthenticated stored XSS: a stranger can plant JavaScript through a blog comment (CVE-2026-100180).\n\nAffects versions up to 3.2.19.\n\nFix: update to 3.2.20.", "creation_timestamp": "2026-10-03T03:14:38.045596Z"}