Now officially on WordPress.org

CVE Database / CVE-2026-7665

CVE · Medium

CVE-2026-7665 — Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-7665 Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.5 Authorization Bypass Through User-Controlled Key Medium 5.3 < 6.6.5 6.6.5 2026-06-05 —

CVE-2026-7665

The Essential Addons for Elementor plugin exposes sensitive post information in WordPress versions prior to 6.6.4 due to inadequate controls on the ajax_load_more function, allowing unauthorized users to retrieve details about restricted content such as password-protected or private posts. This vulnerability enables attackers to bypass access restrictions and obtain sensitive data they shouldn't be able to see.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings