The Elementor Addon Elements plugin for WordPress has a security issue where attackers with certain permissions can inject harmful web scripts into pages. This can happen in versions up to 1.13.5 because the plugin does not properly clean up and protect against this type of attack.