medium5.3
CVE-2026-110508
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email…
Impact
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an administrator when both features are enabled.
Affected products
| Product | Affected versions |
|---|---|
| Essential Addons For Elementor WordPress Plugin | before 6.8.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.