Now officially on WordPress.org

CVE Database / CVE-2026-65502

CVE · Medium

CVE-2026-65502 — Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 8.7.14

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-65502 Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons [bdthemes-element-pack-lite] < 8.7.14 Authentication Bypass by Spoofing Medium 5.3 < 8.7.14 8.7.14 2026-07-28 —

CVE-2026-65502

The Element Pack Addons for Elementor plugin contains a security flaw that allows unverified users to bypass access controls due to the absence of capability checks on certain functions in versions prior to and including 8.7.13, enabling them to execute unauthorized actions without proper authorization. This vulnerability is present across all affected iterations.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings