Live › vulnerability › CVE-2026-114182
Go to dashboardPowerPack Addons for Elementor, a WordPress plugin, has a missing authorization check that lets a request reach functions it should restrict. Per the advisory text an attacker can exploit incorrectly configured access control, and the sources do not say what data or actions are reachable.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running PowerPack Addons for Elementor at version 3.1.0 or earlier are affected according to the advisory range. The sources do not say which configurations or roles make a site exposed, so the exact exposure is unknown. Sites without this plugin installed can skip it.
No product ranges from the sources yet.
powerpack-lite-for-elementor plugin in the WordPress admin plugins list or with wp plugin get powerpack-lite-for-elementor --field=version3.1.0Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-114182")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.