CVE-2026-84146

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin (versions before 1.7.8 ) fails to perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier. This allows unauthenticated visitors to retrieve the title, price, SKU, de...