CVE-2026-56028

28th percentile — higher than 28% of all known CVEs

The Easy Elements for Elementor plugin versions 1.4.9 and earlier contain a vulnerability allowing unauthenticated privilege escalation. This flaw stems from insufficient permission checks within the plugin's functionality.

An unauthenticated attacker can gain unauthorized access to administrative functions, potentially leading to full site compromise.

Immediately update the Easy Elements for Elementor plugin to version 1.5.0 or later, which includes a fix for this vulnerability.