Live › vulnerability › CVE-2026-115949
Go to dashboardThe Better Post & Filter Widgets for Elementor WordPress plugin has a missing authorization check, so access control is not enforced on some functionality. The sources do not say exactly what an attacker can read or change once that check is bypassed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 10:29 UTC. All times on this page are UTC.
Sites running the Better Post & Filter Widgets for Elementor plugin at version or earlier are affected. The sources do not say which configuration or role is needed to reach the flawed function. Sites that do not run this plugin can skip it.
1.9.1No product ranges from the sources yet.
better-post-filter-widgets-for-elementor in the WordPress admin plugin list and note its version.1.9.1, if the vendor has released one.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.9.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-115949")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.