PT-2026-40885 · Wpdevteam · Essential Addons For Elementor – Popular Elementor Templates & Widgets

Athiwat Tiprasaharn · Published 2026-05-14 · Updated 2026-05-14 · CVE-2026-5193

NVD

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.5.13. This is due to insufficient role validation in the 'register user' function, which only blocks the 'administrator' role. This makes it possible for authenticated attackers, with author level access and above, to create new user accounts with elevated privileges such as editor.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-5193

Affected Products

Essential Addons For Elementor – Popular Elementor Templates & Widgets

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-5193 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/22930940-8e2c-446a-954c-90d617f3ca6d?source=cve · Note
• https://plugins.trac.wordpress.org/changeset/3499726/essential-addons-for-elementor-lite/trunk/includes/Traits/Login_Registration.php · Note