OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-84903

LOW · CVSS 2.7 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The King Addons for Elementor WordPress plugin prior to version 51.1.81 is vulnerable due to inadequate access controls, allowing users with Contributor-level access and above to view private, draft, pending, and password-protected posts without proper authorization. This flaw can lead to unauthorized information disclosure, potentially exposing sensitive content. WordPress site administrators and users of this plugin should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-84903
Severity
LOW
CVSS
2.7
EPSS
0.32%
WordPress

Original NVD Description

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.