01 Record

CVE-2026-18039

Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment

HighPUBLISHEDCNA: WPScan

Base score8.1 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment

Published: 2026-08-14 06:00Z12 HR AGO
Last updated: 2026-08-14 15:26Z2 HR AGO
Reserved: 2026-07-28
Assigning CNA: WPScan
Record state: PUBLISHED
Severity: High (CVSS 8.1)
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-269
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: 563545ad47d04cbb0d24b45588ce06d174bd834f4fa004ca1ce969135800e8e6

VendorProductVersionsPlatforms