88 matches found
CVE-2026-91046
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91047
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
CVE-2026-91046 ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91047 ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
EUVD-2026-104085
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
EUVD-2026-104084
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91046
The ElementsReady Addons for Elementor WordPress plugin, in versions through 6.7.2 , is vulnerable to an improper access control issue. The plugin fails to perform sufficient authorization checks within several of its settings-save handlers . This oversight allows users with subscriber-level acce...
CVE-2026-91047
The ElementsReady Addons for Elementor WordPress plugin, affecting versions through 6.7.2 , contains a security flaw that fails to properly restrict access to protected WooCommerce product downloads . This vulnerability allows unauthenticated users to bypass payment requirements and retrieve paid...
PT-2026-117237
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description Insufficient authorization checks in several settings-save handlers allow users with subscriber-level access and above to overwrite stored settings. This includes...
PT-2026-117238
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description The plugin fails to properly restrict access to protected WooCommerce product downloads. This allows unauthenticated users to bypass payment requirements and...
CVE-2026-91046: Improper Access Control
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91047: Missing Authorization
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
CVE-2024-34374
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 5.8.0...
EUVD-2024-49942
Malicious code in bioql PyPI...
EUVD-2024-52350
Malicious code in bioql PyPI...
EUVD-2025-11326
Malicious code in bioql PyPI...
EUVD-2024-45546
Malicious code in bioql PyPI...
EUVD-2024-34746
Malicious code in bioql PyPI...
CVE-2024-47353
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite.This issue affects ElementsReady Addons for Elementor: from n/a through 6.4.2...
CVE-2024-51787
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through = 6.4.3...