CVE-2026-110898Medium· 6.4▾ SunlitIncorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.
essential-addons-for-elementor-lite <= 6.8.5Update the WordPress Essential Addons for Elementor plugin to the latest available version (at least 6.8.6).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102394Medium· 6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons fo…
CVE-2026-112045Medium· 5.4donetick History Deletion model.go CanDeleteHistory improper authorization
CVE-2026-112025High· 7.3light0011 cms Captcha Validation UserController.class.php access control
CVE-2026-110372Critical· 9.8WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
CVE-2026-110373High· 8.1WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability
CVE-2026-109693High· 8.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.