Now officially on WordPress.org

CVE Database / CVE-2026-25440

CVE · Medium

CVE-2026-25440 — Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-25440 Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.0 Missing Authorization Medium 5.3 < 6.6.0 6.6.0 2026-04-22 —

CVE-2026-25440

A security flaw exists in the Essential Addons for Elementor plugin, which allows unverified users to execute an illicit operation because of a failure to verify user permissions on a specific function within versions prior to 6.6.0. This oversight enables malicious individuals without proper authorization to carry out unauthorized actions.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings