CVE-2026-114182
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor (powerpack-lite-for-elementor) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PowerPack Addons for Elementor from n/a through 3.1.0.
Risk Assessment
Unauthorized users may perform operations reserved for higher privileges, potentially leading to unauthorized changes on the WordPress site.
Recommendation
Update PowerPack Addons for Elementor to a version later than 3.1.0. Review user account permissions and check logs for unauthorized actions.
Other vulnerabilities in PowerPack Addons for Elementor
See all- CVE-2026-111400Medium
The PowerPack Addons for Elementor plugin contains a Stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 3.1.0.
- CVE-2026-108488Medium
The PowerPack Addons for Elementor plugin up to version 3.1.0 contains a stored XSS (Cross-site Scripting) vulnerability due to improper input neutralization during web page generation. This allows an attacker to inject malicious scripts that will execute in other users' browsers.
Original NVD description (English source)
Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS