Elementor

WordPress HT Mega (Absolute Addons for Elementor) Unauthenticated PII Disclosure (CVE-2026-4106) newCVE-2026-4106webHIGHUnverified2026-07-05Piotnet Addons for Elementor Pro Unauthenticated Arbitrary File Upload RCE (CVE-2026-4885) newCVE-2026-4885webCRITICALUnverified2026-07-05LA-Studio Element Kit for Elementor — Unauthenticated Admin Account Creation (CVE-2026-0920) newCVE-2026-0920webCRITICAL 9.8Unverified2026-07-05Integration for ActiveCampaign Unauthenticated PHP Object Injection via Unsafe Deserialization (CVE-2026-9691) newCVE-2026-9691webHIGH 8.1Unpatched2026-07-05ElementsKit Elementor Addons Authenticated Stored XSS via REST API (CVE-2026-2600) newCVE-2026-2600webMEDIUM 6.4Patched2026-07-05Easy Elements for Elementor Unauthenticated Privilege Escalation via `custom_meta` Overwrite (CVE-2026-9018) newCVE-2026-9018webHIGH 8.8Patched2026-07-05