CVE-2026-24386

creationtimestamp| type| source ---|---|--- 2026-01-22 17:30:56+00:00| seen| https://gist.github.com/Darkcrai86/80ea23442b9839b52adf8b8b0cd94763 2026-01-22 19:53:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczxmrj3tl2n...

CVE-2026-24386

CVE-2026-24386 describes a Missing Authorization vulnerability in the WordPress plugin “Element Invader – Template Kits for Elementor” (versions n/a through 1.2.4). The root cause is incorrectly configured access control, enabling unauthorized access to protected actions/files within elementinvad...

CVE-2026-24386 WordPress Element Invader – Template Kits for Elementor plugin <= 1.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Element Invader Element Invader – Template Kits for Elementor elementinvader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Invader – Template Kits for Elementor: from n/a through = 1.2.4...