198 matches found
essential-addons-for-elementor-xss-poc
🔍 Essential Addons for Elementor XSS Vulnerability Detector 🚨 Critical Information This tool is for security research and patching purposes only. Do not use it to harm sites. If you find vulnerable sites, report them responsibly to site owners so they can update immediately. ⚠️ Vulnerability...
WordPress Essential Addons for Elementor plugin 6.6.0-6.8.7 - Author+ Privilege Escalation vulnerability
Author+ Privilege Escalation vulnerability discovered by Adam Kahlon in WordPress Plugin Essential Addons for Elementor versions 6.6.0-6.8.7...
CVE-2026-110808
The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts created through its registration form, allowing authenticated users with Author-level access and above to cause newly registered accounts, including those created...
CVE-2026-110808 Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role
The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts created through its registration form, allowing authenticated users with Author-level access and above to cause newly registered accounts, including those created...
CVE-2026-110808
The Essential Addons for Elementor WordPress plugin (versions 6.6.0 through 6.8.7 ) is vulnerable to a privilege escalation flaw. The plugin fails to correctly restrict which users can define roles for accounts created via its registration form. This allows authenticated users with Author-level a...
EUVD-2026-114581
The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts created through its registration form, allowing authenticated users with Author-level access and above to cause newly registered accounts, including those created...
CVE-2026-110808 Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role
The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts created through its registration form, allowing authenticated users with Author-level access and above to cause newly registered accounts, including those created...
CVE-2026-110808: Unknown Essential Addons for Elementor: The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role…
The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts created through its registration form, allowing authenticated users with Author-level access and above to cause newly registered accounts, including those created...
PT-2026-134423
The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts created through its registration form, allowing authenticated users with Author-level access and above to cause newly registered accounts, including those created...
CVE-2026-118205
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the pageid parameter of the registeruser function. The vulnerability exists because the handler's post status...
CVE-2026-118205
The Essential Addons for Elementor plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to and including 6.8.7 . The flaw exists in the register_user() function's page_id parameter due to a logic error where the post status deny-list admits inherit (the st...
CVE-2026-118205 Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the pageid parameter of the registeruser function. The vulnerability exists because the handler's post status...
CVE-2026-118205 Essential Addons for Elementor <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter via Elementor Revision
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the pageid parameter of the registeruser function. The vulnerability exists because the handler's post status...
EUVD-2026-114227
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the pageid parameter of the registeruser function. The vulnerability exists because the handler's post status...
WordPress Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin <= 6.8.7 - Unauthenticated Privilege Escalation to 'page_id' Parameter vulnerability
Unauthenticated Privilege Escalation to 'pageid' Parameter vulnerability discovered by crow in WordPress Plugin Essential Addons for Elementor versions = 6.8.7...
PT-2026-133704
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the page id parameter of the register user function. The vulnerability exists because the handler's post status...
CVE-2026-118205: wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets: The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to…
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the pageid parameter of the registeruser function. The vulnerability exists because the handler's post status...
CVE-2026-118077
Author PHP Object Injection in Sastra Essential Addons for Elementor = 1.2.3 versions...
CVE-2026-118077 WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerability
Author PHP Object Injection in Sastra Essential Addons for Elementor = 1.2.3 versions...