Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Essential Addons for Elementor 6.6.10 Clear all filters
TI-2026-11307 CVE-2026-13345 · GHSA-vmp7-rm2p-637r

Authorization bypass in Essential Addons for Elementor

Priority MEDIUM 63

The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce products in its product-comparison feature, allowing unauthenticat…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2026-07-30 Fixed in 6.6.10 CWE-639
TI-2026-11306 CVE-2026-13344 · GHSA-wqx2-q6jg-7j96

Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag

Priority MEDIUM 55

The Essential Addons for Elementor WordPress plugin before 6.6.10 does not validate the HTML tag name of the Pricing Table widget title before outputting it, allowing users with Contributor-level access and above to inje…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00242 Published 2026-07-30 Fixed in 6.6.10 CWE-79