CVE-2026-13345

5.3 Moyenne

Publiée le 30/07/2026 à 08:24 · Modifiée le 30/07/2026 à 21:17 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce products in its product-comparison feature, allowing unauthenticated users to disclose the title, price, and SKU of draft, pending, and private products that are otherwise withheld from public view.

Traduire en français

Produits concernés

Unknown Essential Addons for Elementor

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-639

Références

https://wpscan.com/vulnerability/45937bce-12db-4770-9f15-606c62469f6d/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories