Elementor Ally

• CVE-2026-25386 Medium 5.3 WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability 0.2%
• CVE-2025-32640 Medium 5.9 WordPress One Click Accessibility plugin <= 3.1.0 - Cross-Site Scripting (XSS) vulnerability 0.4%