EA
Product
Essential Addons for Elementor
7
CVEs
0
On KEV
8.1
Max CVSS
4
New 30D
Severity mix
Critical 0High 1Medium 3Low 2
Watch
Add Essential Addons for Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18039 | 8.1 | Aug 14 | Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment Affected: 5.8.6 before 6.7.2 |
| CVE-2026-110508 New | 5.3 | Oct 28 | Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification Affected: 6.7.3 before 6.8.7 |
| CVE-2026-13345 | 5.3 | Jul 30 | Essential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare Table Affected: before 6.6.10 |
| CVE-2026-13344 | 4.8 | Jul 30 | Essential Addons for Elementor - Lite < 6.6.10 - Contributor+ Stored XSS via Pricing Table Title Tag Affected: before 6.6.10 |
| CVE-2026-110537 New | 3.8 | Oct 23 | Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action Affected: before 6.8.7 |
| CVE-2026-110510 New | 3.5 | Oct 23 | Essential Addons for Elementor < 6.8.7 - Author+ Content Injection via Pricing Table and Post Timeline Title Tag Affected: before 6.8.7 |
| CVE-2026-110509 New | – | Oct 28 | Essential Addons for Elementor < 6.8.7 - Unauthenticated Private Post Meta Disclosure via load_more AJAX Handler Affected: before 6.8.7 |
Showing 7