elemntor Ally – Web Accessibility & Usability

• CVE-2026-2413 High 7.5 Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path 2.4%
• CVE-2025-10700 Medium 4.3 Ally - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Update 0.2%