Input validation vulnerability in Mega Elements – Addons for Elementor 1.3.2

The Mega Elements plugin for WordPress, which is used with Elementor, has a security issue where malicious code can be injected through the Countdown Timer widget. This can happen in all versions up to 1.3.2 because the plugin does not properly check and protect user input. This means that attackers who have contributor-level access or higher can add harmful scripts to pages, which will then run whenever someone visits that page.