medium4.3
CVE-2026-91046
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save…
Impact
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing users with subscriber-level access and above to overwrite the ElementsReady Addons for Elementor WordPress plugin through 6.7.2's stored settings, including its stored API credentials and its feature and template configuration.
Affected products
| Product | Affected versions |
|---|---|
| ElementsReady Addons For Elementor WordPress Plugin | through 6.7.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.