92 matches found
CVE-2026-91046
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91047
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
CVE-2026-91047 ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
CVE-2026-91046 ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
WordPress ElementsReady Addons for Elementor plugin <= 6.7.2 - Unauthenticated Paid Download Access Bypass vulnerability
Unauthenticated Paid Download Access Bypass vulnerability discovered by ryan fabella in WordPress Plugin ElementsReady Addons for Elementor versions = 6.7.2...
WordPress ElementsReady Addons for Elementor plugin <= 6.7.2 - Subscriber+ Plugin Settings Overwrite vulnerability
Subscriber+ Plugin Settings Overwrite vulnerability discovered by Stefan Spasic in WordPress Plugin ElementsReady Addons for Elementor versions = 6.7.2...
CVE-2026-91047 ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download Access Bypass via 'downloadtype' Parameter
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
EUVD-2026-104085
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
EUVD-2026-104084
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91046
The ElementsReady Addons for Elementor WordPress plugin, in versions through 6.7.2 , is vulnerable to an improper access control issue. The plugin fails to perform sufficient authorization checks within several of its settings-save handlers . This oversight allows users with subscriber-level acce...
CVE-2026-91046 ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2026-91047
The ElementsReady Addons for Elementor WordPress plugin, affecting versions through 6.7.2 , contains a security flaw that fails to properly restrict access to protected WooCommerce product downloads . This vulnerability allows unauthenticated users to bypass payment requirements and retrieve paid...
PT-2026-117237
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description Insufficient authorization checks in several settings-save handlers allow users with subscriber-level access and above to overwrite stored settings. This includes...
PT-2026-117238
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description The plugin fails to properly restrict access to protected WooCommerce product downloads. This allows unauthenticated users to bypass payment requirements and...
CVE-2026-91047: Missing Authorization
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file...
CVE-2026-91046: Improper Access Control
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin...
CVE-2024-34374
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows Stored XSS.This issue affects ElementsReady Addons for Elementor: from n/a through 5.8.0...
EUVD-2025-11326
Malicious code in bioql PyPI...