medium5.3
CVE-2026-91047
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing un…
Impact
The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file.
Affected products
| Product | Affected versions |
|---|---|
| ElementsReady Addons For Elementor WordPress Plugin | through 6.7.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.