5.3
Medium
CVE-2026-25440 Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions
Description
Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Essential Addons for Elementor 6.6 | earliest → < 6.6.0 | 6.6.0 |
Other CVEs of Essential Addons for Elementor
The 15 CVEs of Essential Addons for Elementor →
CVE-2026-110898
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor…
6.4
Medium
CVE-2026-102394
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
6.5
Medium
CVE-2026-81777
Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing
5.3
Medium
CVE-2026-23543
Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite…
5.3
Medium