4.3
Moyenne
CVE-2026-97352 The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX…
Description
The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from the WordPress.org repository.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| News Kit Addons For Elementor 1.4 | premières → < 1.4.9 | 1.4.9 |