CVE-2026-28164

CriticalCVSS 9.6

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons. Allows an attacker to perform unauthorized actions on behalf of a logged-in user. Affects versions up to 2.3.7.

Risk Assessment

The risk involves the possibility of performing unwanted operations in the admin panel by the victim, which may lead to configuration changes or data integrity compromise.

Recommendation

Immediately update the Easy Elementor Addons plugin to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7.