Unknown Essential Addons For Elementor vulnerabilities

3 CVEs affecting Unknown Essential Addons For Elementor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18039, published 2026-08-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-18039, published 2026-08-14. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account attributes, allowing unauthenticated attackers…
CVE-2026-13345, published 2026-07-30. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce products in its product-comparison feature,…
CVE-2026-13344, published 2026-07-30. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Essential Addons for Elementor WordPress plugin before 6.6.10 does not validate the HTML tag name of the Pricing Table widget title before outputting it, allowing users with Contributor-level…