CVE WATCH / VULNERABILITY DETAIL
CVE-2026-118205
HIGHCVSS 7.4NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the `page_id` parameter of the `register_user()` function. The vulnerability exists because the handler's post status
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog