CVE-2026-110537
CVE-2026-110537 · Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its login-approval feature, checking only a site-level capability, which on WordPress Multisite could allow a subsite administrator to change the approval and login state of accounts belonging to other sites on the network.
CVSS 3.8 · Faible · EPSS 0,2% · Correctif disponible
- Publication
- Mise à jour
Produits et versions concernés
essential addons for elementor
- Versions du logiciel
- ≥ 0, < 6.8.7: Concernée (semver)
Mettez à jour vers 6.8.7