Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Essential Addons for Elementor 6.8.7 Clear all filters
TI-2026-79566 CVE-2026-110537 · GHSA-rhrq-vr3g-vpch

Incorrect authorization in Essential Addons for Elementor approval

Priority LOW 18

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its login-approval feature, checking only a site-level capability,…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00244 Published 2026-10-23 Fixed in 6.8.7 CWE-863
TI-2026-79565 CVE-2026-110510 · GHSA-282g-jjg9-h9cq

Author-level content injection in Essential Addons for Elementor

Priority LOW 16

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow users with the author role and above to in…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00112 Published 2026-10-23 Fixed in 6.8.7 CWE-345