WordPress security by component
Easy Elements for Elementor – Addons & Website Templates
Plugin description
Easy Elements for Elementor – Addons & Website Templates is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jun 26, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
easy-elementsLatest vulnerability
CVE-2026-56028: Easy Elements for Elementor – Addons & Website Templates: Privilege escalation or authentication bypass
Easy Elements for Elementor – Addons & Website Templates is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is n/a through 1.4.9.
| Safe version |
|
||
|---|---|---|---|
| Jun 26, 2026 |
CVE-2026-56028
Easy Elements for Elementor – Addons & Website Templates: Privilege escalation or authentication bypass
Easy Elements for Elementor – Addons & Website Templates is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is n/a through 1.4.9.
|
1.5.0 |
CVE9.8
NVDPending
|
| May 22, 2026 |
CVE-2026-9018
Easy Elements for Elementor – Addons & Website Templates: Privilege escalation or authentication bypass
Easy Elements for Elementor – Addons & Website Templates is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.4.5.
|
> 1.4.5 |
CVE8.8
NVDPending
|
| May 20, 2026 |
CVE-2026-7284
Easy Elements for Elementor – Addons & Website Templates: Privilege escalation or authentication bypass
Easy Elements for Elementor – Addons & Website Templates is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 1.4.4.
|
> 1.4.4 |
CVE9.8
NVDPending
|