Live › vulnerability › CVE-2026-110898
Go to dashboardEssential Addons for Elementor, a WordPress plugin, has an incorrect privilege assignment flaw that allows privilege escalation. An attacker with a low-privilege account could gain higher rights on the site.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Essential Addons for Elementor at version or earlier are affected. The sources do not say which roles or settings make a site more exposed. Sites that do not run this plugin can skip it.
6.8.5No product ranges from the sources yet.
wp plugin get essential-addons-for-elementor-lite --field=version with WP-CLIessential-addons-for-elementor-lite in the site's plugin directory6.8.5Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-110898")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.