Veille CVE

Lundi 19 octobre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown ElementsReady Addons for Elementor » ✕
  1. CVE-2026-91047 5.3 Moyenne

    Unknown ElementsReady Addons for Elementor

    The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file.

  2. CVE-2026-91046 4.3 Moyenne

    Unknown ElementsReady Addons for Elementor

    The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin through 6.7.2's stored settings, including its stored API credentials and its feature and template configuration.