CVE-2026-84146

CVE-2026-84146 affects the Xpro Addons — 140+ Widgets for Elementor WordPress plugin in versions prior to 1.7.8 . The plugin fails to perform a capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier. This allows unauthenticated visitors t...