CVE-2026-18039

The CVE-2026-18039 entry affects the WordPress plugin Essential Addons for Elementor (pre-6.7.2). The issue arises from not preventing user-supplied registration fields from overwriting reserved account attributes, enabling unauthenticated actors to register accounts with arbitrary roles (includi...