{"id":"CVE-2026-110898","title":"WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability","summary":"Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.","severity":"medium","cvss":6.4,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-266"],"vendor":"WPDeveloper","product":"essential-addons-for-elementor-lite","affected":["essential-addons-for-elementor-lite <= 6.8.5"],"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T09:09:19.416Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110898","references":[{"url":"https://patchstack.com/database/wordpress/plugin/essential-addons-for-elementor-lite/vulnerability/wordpress-essential-addons-for-elementor-plugin-6-8-5-privilege-escalation-vulnerability?_s_id=cve"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T10:20:55.153Z","slug":"CVE-2026-110898","body":"## Overview\n\nIncorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.\n\n## Affected\n\n- `essential-addons-for-elementor-lite <= 6.8.5`\n\n## Remediation\n\nUpdate the WordPress Essential Addons for Elementor plugin to the latest available version (at least 6.8.6).","depth":"sunlit","depthScore":35,"depthScoreParts":{"impact":35.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}