CVE-2026-59511
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
The Exclusive Addons Elementor plugin for WordPress contains a vulnerability of inserting sensitive information into sent data, allowing retrieval of embedded sensitive data. This issue affects versions from n/a through 2.7.9.9.
Risk Assessment
An attacker can intercept sensitive data (e.g., API keys, tokens) transmitted by the plugin, leading to information disclosure and potential security breach of the application.
Recommendation
Immediately update the Exclusive Addons Elementor plugin to the latest available version that fixes this vulnerability.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrieve Embedded Sensitive Data. This issue affects Exclusive Addons Elementor: from n/a through 2.7.9.9.