Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Essential Addons for Elementor 6.8.7 Clear all filters
TI-2026-81939 CVE-2026-110508 · GHSA-3qcw-2qw4-98px

Essential Addons for Elementor OTP registration bypasses approval

Priority LOW 30

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated us…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-10-28 Fixed in 6.8.7 CWE-862
TI-2026-81697 CVE-2026-110509 · GHSA-cw3q-m3wh-782r

Unauthenticated private post meta disclosure in Essential Addons for Elementor

Priority LOW 30

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or meta query an unauthenticated visitor can pass to its pagination endpoint, which could allow them to read content of non…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00251 Published 2026-10-28 Fixed in 6.8.7 CWE-200