The Exclusive Addons for Elementor plugin, used for WordPress, has a security issue called Stored Cross-Site Scripting. This means that the plugin’s Animated Text and Image Comparison widgets are not properly protected against harmful code that could be added by users. This allows attackers who have contributor-level access or higher to insert their own code into pages that will run whenever someone views that page.