{"id":"CVE-2026-84902","title":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template content into a page, allowing users with contributor-level access and above to overwrite the Elem…","summary":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template content into a page, allowing users with contributor-level access and above to overwrite the Elem…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-79"],"product":"King Addons for Elementor","affected":["king_addons_for_elementor < 51.1.81"],"published":"2026-09-18","updated":"2026-09-18","sourceUpdated":"2026-09-18T19:08:32.830","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-84902","references":[{"url":"https://wpscan.com/vulnerability/4afc5f30-8b30-4e77-9bd7-91c25065bb54/","label":"contact@wpscan.com"}],"tags":["nvd","cve.org"],"epss":0.0029,"epssPercentile":0.2185,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-18T11:05:59.854658Z"},"ingestedAt":"2026-09-18T06:36:37.981Z","slug":"CVE-2026-84902","body":"## Overview\n\nThe King Addons for Elementor  WordPress plugin before 51.1.81 does not perform an object-level authorization check when importing template content into a page, allowing users with contributor-level access and above to overwrite the Elementor content of arbitrary posts and pages, including those owned by administrators, and to inject JavaScript through a widget setting that is output without escaping, resulting in Stored Cross-Site Scripting that executes in the session of any user who views the affected page.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":206723,"id":"CVE-2026-84902","ts":1789731638797,"field":"cvss","old":null,"new":"6.8"},{"seq":206722,"id":"CVE-2026-84902","ts":1789731638797,"field":"severity","old":"none","new":"medium"}]}