Lucene search
K

26 matches found

NVD
NVD
added 2026/04/09 2:16 a.m.0 views

CVE-2026-4326

The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activaterequiredplugins function. Specifically, the currentusercan'installplugins' capability check does...

8.8CVSS0.00046EPSS
Exploits0References10
Cvelist
Cvelist
added 2026/04/09 1:25 a.m.23 views

CVE-2026-4326 Vertex Addons for Elementor <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins'

The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activaterequiredplugins function. Specifically, the currentusercan'installplugins' capability check does...

8.8CVSS0.00046EPSS
Exploits0References10
CVE
CVE
added 2026/04/09 1:25 a.m.7 views

CVE-2026-4326

CVE-2026-4326 concerns the Vertex Addons for Elementor plugin for WordPress, affecting all versions up to 1.6.4. The root cause is improper authorization enforcement in the activate_required_plugins() function: the capability check current_user_can('install_plugins') does not terminate execution ...

8.8CVSS6.2AI score0.00046EPSS
Exploits0References10
EUVD
EUVD
added 2026/04/09 1:25 a.m.1 views

EUVD-2026-20825

The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activaterequiredplugins function. Specifically, the currentusercan'installplugins' capability check does...

8.8CVSS6.2AI score0.00046EPSS
Exploits0References10
ATTACKERKB
ATTACKERKB
added 2026/04/09 1:25 a.m.1 views

CVE-2026-4326

The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activaterequiredplugins function. Specifically, the currentusercan'installplugins' capability check does...

8.8CVSS6.2AI score0.00046EPSS
Exploits0References11
Vulnrichment
Vulnrichment
added 2026/04/09 1:25 a.m.0 views

CVE-2026-4326 Vertex Addons for Elementor <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins'

The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activaterequiredplugins function. Specifically, the currentusercan'installplugins' capability check does...

8.8CVSS6.2AI score0.00046EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.3 views

WordPress plugin Vertex Addons for Elementor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.8CVSS5.9AI score0.00046EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.0 views

PT-2026-31563

Name of the Vulnerable Software and Affected Versions Vertex Addons for Elementor plugin for WordPress versions up to and including 1.6.4 Description The Vertex Addons for Elementor plugin for WordPress is susceptible to a missing authorization issue. This is caused by insufficient authorization...

8.8CVSS6AI score0.00046EPSS
Exploits0References17
RedhatCVE
RedhatCVE
added 2026/03/26 5:4 p.m.3 views

CVE-2026-25398

Missing Authorization vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vertex Addons for Elementor: from n/a through = 1.6.4...

6.5CVSS5.8AI score0.00013EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.1 views

EUVD-2026-15711

Missing Authorization vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vertex Addons for Elementor: from n/a through = 1.6.4...

5.8AI score0.00013EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 5:16 p.m.1 views

CVE-2026-25398

Missing Authorization vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vertex Addons for Elementor: from n/a through = 1.6.4...

6.5CVSS0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.20 views

CVE-2026-25398 WordPress Vertex Addons for Elementor plugin <= 1.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vertex Addons for Elementor: from n/a through = 1.6.4...

6.5CVSS0.00013EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.3 views

CVE-2026-25398

Vertex Addons for Elementor (WordPress plugin)

6.5CVSS5.8AI score0.00013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.1 views

CVE-2026-25398 WordPress Vertex Addons for Elementor plugin <= 1.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vertex Addons for Elementor: from n/a through = 1.6.4...

6.5CVSS5.8AI score0.00013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.2 views

PT-2026-27937

Name of the Vulnerable Software and Affected Versions Webilia Inc. Vertex Addons for Elementor versions through 1.6.4 Description An incorrect access control configuration exists in Webilia Inc. Vertex Addons for Elementor. This allows exploitation due to missing authorization checks...

6.5CVSS5.9AI score0.00013EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

WordPress plugin Vertex Addons for Elementor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

6.5CVSS5.8AI score0.00013EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/23 2:38 p.m.1 views

WordPress Vertex Addons for Elementor plugin <= 1.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by theviper17 in WordPress Plugin Vertex Addons for Elementor versions = 1.6.4...

6.5CVSS5.8AI score0.00013EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-4871

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00088EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/19 12:23 p.m.3 views

CVE-2025-26769

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Stored XSS.This issue affects Vertex Addons for Elementor: from n/a through = 1.2.0...

6.5CVSS7.2AI score0.00088EPSS
Exploits0References1
NVD
NVD
added 2025/02/17 12:15 p.m.7 views

CVE-2025-26769

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Stored XSS.This issue affects Vertex Addons for Elementor: from n/a through = 1.2.0...

6.5CVSS0.00088EPSS
Exploits0References1
Rows per page
Query Builder