Privilege Escalation in WPDeveloper Essential Addons for Elementor Plugin
CVE-2026-110898

6.4MEDIUM

Key Information:

Vendor

WordPress
Status
Essential Addons For Elementor
Vendor
CVE Published:
19 October 2026

What is CVE-2026-110898?

A vulnerability has been identified in the WPDeveloper Essential Addons for Elementor plugin, where incorrect privilege assignments can lead to privilege escalation. This issue affects all versions from n/a up to 6.8.5, allowing unauthorized users to gain elevated access, potentially compromising the integrity of the site. Users are advised to update to the latest version to protect against this security risk.

Affected Version(s)

Essential Addons for Elementor 0 <= 6.8.5

References

https://patchstack.com/database/wordpress/plugin/essentia...
vdb-entry

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adam Kahlon (Adkali) | Patchstack Bug Bounty Program
.