Input validation vulnerability in The Plus Addons for Elementor Page Builder 5.5.4

A popular plugin for WordPress called The Plus Addons for Elementor Page Builder has a security issue. This issue, known as Stored Cross-Site Scripting, allows hackers to insert harmful code into certain parts of the plugin. This can happen when the ‘size’ setting is used in the Heading Title widget. The problem affects all versions of the plugin up to version 5.5.4 and can be exploited by people with contributor-level access or higher. This means that if you use this plugin, your website could be vulnerable to attacks from these hackers.