Element Pack - Premium Addon for Elementor WordPress Plugin v9.9.0 Nulled
## 9.9.0 [23rd August 2026]
### Fixed
- Iconnav, Circle Menu, Price Table, Marker, Helpdesk, Icon Mobile Menu, Logo Grid and Logo Carousel widgets: Stored XSS vulnerability fixed in the tooltip text of each, the same entity encoded payload that affected Image Stack
- Tooltip HTML is now filtered through an allow list of formatting tags, so headings, bold, italic, links and line breaks keep working while scripts, iframes, event handler attributes and `javascript:` links are removed
- Tooltip extension: the shared HTML sanitizer now parses markup with the browser's HTML parser instead of a regular expression, so an unterminated tag such as `<img src=x onerror=...` can no longer slip through
- CSS issue fixed in Scroll Box extension
- Image Stack widget: Stored XSS vulnerability fixed, where an entity encoded payload in an item's Tooltip Text survived tag stripping and was executed when the tooltip rendered ( Thanks to Wordfence )