Medium severity5.3NVD Advisory· Published Oct 28, 2026

CVE-2026-110508

Description

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an administrator when both features are enabled.

Affected products

WordPress/Essential Addons For Elementorllm-fuzzy
Range: <6.8.7

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/77c4b22a-b1c2-4b65-b98c-e07489f94864/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000