Essential Addons For Elementor

WordPress plugin · essential-addons-for-elementor · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Essential Addons For Elementor on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 8.1	Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment CVE.org	>=5.8.6, <6.7.2	v6.7.2	CVE-2026-18039	Aug 14, 2026
MEDIUM CVSS 4.2	Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role CVE.org	>=6.6.0, <6.8.8	v6.8.8	CVE-2026-110808	Oct 31, 2026
MEDIUM CVSS 5.3	Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification CVE.org	>=6.7.3, <6.8.7	v6.8.7	CVE-2026-110508	Oct 28, 2026
MEDIUM CVSS 5.3	Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler CVE.org	>=0, <6.8.7	v6.8.7	CVE-2026-110509	Oct 28, 2026
MEDIUM CVSS 4.8	Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag CVE.org	>=0, <6.6.10	v6.6.10	CVE-2026-13344	Jul 30, 2026
MEDIUM CVSS 5.3	Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table CVE.org	>=0, <6.6.10	v6.6.10	CVE-2026-13345	Jul 30, 2026
LOW CVSS 3.5	Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag CVE.org	>=0, <6.8.7	v6.8.7	CVE-2026-110510	Oct 23, 2026
LOW CVSS 3.8	Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action CVE.org	>=0, <6.8.7	v6.8.7	CVE-2026-110537	Oct 23, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.