CVE-2026-110508
CVE-2026-110508 · Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an administrator when both features are enabled.
CVSS 5.3 · Moyenne · EPSS 0,3% · Correctif disponible
- Publication
- Mise à jour
Produits et versions concernés
essential addons for elementor
- Versions du logiciel
- ≥ 6.7.3, < 6.8.7: Concernée (semver)
Mettez à jour vers 6.8.7