CVE-2026-65502
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Bypass vulnerability in Element Pack Elementor Addons versions up to 8.7.13 allows an unauthenticated attacker to bypass security controls.
Risk Assessment
An attacker can bypass access control mechanisms, potentially leading to unauthorized actions in the admin panel.
Recommendation
Update the Element Pack Elementor Addons plugin to the latest version that includes the security fix.
Other vulnerabilities in Element Pack Elementor Addons
See all- CVE-2026-105873Medium
The Element Pack Elementor Addons plugin for WordPress has a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 8.8.6.
- CVE-2026-105871Medium
The Element Pack Elementor Addons plugin for WordPress has a Stored XSS vulnerability due to improper neutralization of input during web page generation. This issue affects versions from n/a through 8.8.6.
- CVE-2026-66574Medium
The Element Pack Elementor Addons plugin in versions up to and including 8.8.3 is vulnerable to Cross Site Scripting (XSS). A user with Contributor privileges can inject a malicious script.
Original NVD description (English source)
Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS