News Kit Elementor Addons (<= 1.5.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/news-kit-elementor-addons--1.5.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 17:36:39 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNews Kit Elementor Addons: PHP Object Injection (CVE-2026-118073)https://feed.craftedsignal.io/briefs/2026-10-news-kit-php-injection/Thu, 29 Oct 2026 17:36:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-news-kit-php-injection/News Kit Elementor Addons versions 1.5.0 and earlier contain a Subscriber PHP Object Injection vulnerability.<p>CVE-2026-118073 is a Subscriber PHP Object Injection vulnerability affecting News Kit Elementor Addons versions 1.5.0 and earlier. The base CVSS v3.1 score for this vulnerability is 8.8.</p> highadvisory