5.3
Moyenne
CVE-2026-91047 The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected…
Description
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ElementsReady Addons for Elementor 6.7 | premières → 6.7.2 | Pas de correctif indiqué |