← All advisories

Critical severity9.6NVD Advisory· Published Aug 20, 2026· Updated Aug 24, 2026

CVE-2026-28164

CVE-2026-28164

Description

Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery.

This issue affects Easy Elementor Addons: from n/a through 2.3.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Easy Elementor Addonsllm-fuzzy
Range: <=2.3.7
Package: https://wordpress.org/plugins/easy-elementor-addons

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/easy-elementor-addons/vulnerability/wordpress-easy-elementor-addons-plugin-2-3-7-cross-site-request-forgery-csrf-vulnerabilitynvd

News mentions

3

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)
Wordfence Blog · Aug 27, 2026
WordPress: 25 Plugin Vulnerabilities Disclosed Together, Including Critical Flaws
Vypr Intelligence · Aug 21, 2026
WordPress: 25 Plugin Vulnerabilities Disclosed in Single-Hour Batch
Vypr Intelligence · Aug 20, 2026