CVE-2026-91046
CVE-2026-91046 · ElementsReady Addons for Elementor <= 6.7.2 - Subscriber+ Plugin Settings Overwrite via Missing Authorization
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin through 6.7.2's stored settings, including its stored API credentials and its feature and template configuration.
CVSS 4.3 · Moyenne · EPSS 0,2%
- Publication
- Mise à jour
Produits et versions concernés
elementsready addons for elementor
- Versions du logiciel
- ≥ 0, ≤ 6.7.2: Concernée (semver)
Aucun correctif publié