CVE-2026-110808 Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role

The Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the role assigned to accounts created through its registration form, allowing authenticated users with Author-level access and above to cause newly registered accounts, including those created...

CVE-2026-110808

The Essential Addons for Elementor WordPress plugin (versions 6.6.0 through 6.8.7 ) contains a privilege escalation vulnerability because it fails to correctly restrict who can set the role for accounts created via its registration form. Authenticated users with Author-level access or higher can ...