Better Post & Filter Widgets for Elementor vulnerabilities

3 known CVE vulnerabilities in Better Post & Filter Widgets for Elementor, translated and rated.

CVE-2026-115950Medium
The Better Post & Filter Widgets for Elementor plugin through version 1.9.1 contains a Stored XSS vulnerability caused by improper neutralization of input during web page generation.
CVE-2026-115949Medium
The Better Post & Filter Widgets for Elementor plugin (up to version 1.9.1) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This enables unauthenticated users to perform actions they should not have access to.
CVE-2025-48354Medium
The Better Post & Filter Widgets for Elementor plugin contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This issue affects Better Post & Filter Widgets for Elementor versions from n/a through 1.6.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS