Elementor Ally vulnerabilities

• elementor ally WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-25386 5.3 MediumFebruary 19, 2026
• elementor ally WordPress One Click Accessibility plugin <= 3.1.0 - Cross-Site Scripting (XSS) vulnerability CVE-2025-32640 5.9 MediumApril 9, 2025