Skip to content
Sign in
6.5 Medium

CVE-2026-5193 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to…

Description

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.5.13. This is due to insufficient role validation in the 'register_user' function, which only blocks the 'administrator' role. This makes it possible for authenticated attackers, with author level access and above, to create new user accounts with elevated privileges such as editor.

Affected products and versions

Product Affected versions Fixed in
Essential Addons for Elementor – Popular Elementor Templates & Widgets 6.5 earliest → 6.5.13 No fix stated

Other CVEs of Essential Addons for Elementor – Popular Elementor Templates & Widgets

The 50 CVEs of Essential Addons for Elementor – Popular Elementor Templates & Widgets →
CVE-2026-118205 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to… 7.4 High CVE-2026-15145 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to… 6.4 Medium CVE-2026-15156 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to… 6.4 Medium CVE-2026-15155 The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to… 8.8 High
Track this CVE