PT-2026-1652 · WordPress · Plus Addons For Elementor Pro

Published 2026-01-07 · Updated 2026-01-07 · CVE-2025-46434

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions The Plus Addons for Elementor Pro versions prior to 6.3.7

Description An incorrect access control configuration can lead to unauthorized access. The issue concerns The Plus Addons for Elementor Pro.

Recommendations Update The Plus Addons for Elementor Pro to version 6.3.7 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-46434

Affected Products

Plus Addons For Elementor Pro

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-46434 · Security Note
• https://twitter.com/VulmonFeeds/status/2008922147918402022 · Twitter Post
• https://t.me/CVEtracker/41605 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/theplus_elementor_addon/vulnerability/wordpress-the-plus-addons-for-elementor-pro-plugin-6-3-7-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/theplus_elementor_addon/vulnerability/wordpress-the-plus-addons-for-elementor-pro-plugin-6-3-7-broken-access-control-vulnerability?_s_id=cve · Note