CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-28131 | Addon Elements for Elementor (formerly Elementor Addon Elements) [addon-elements-for-elementor-page-builder] < 1.14.5 | Insertion of Sensitive Information Into Sent Data | Medium 6.5 | < 1.14.5 | 1.14.5 | 2025-08-28 | — |
The Addon Elements for Elementor (formerly Elementor Addon Elements) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive user or configuration data.
Source: Wordfence
No signup, no credit card — enter your URL and get a security report in seconds.