---
id: CVE-2026-91047
title: >-
  ElementsReady Addons for Elementor <= 6.7.2 - Unauthenticated Paid Download
  Access Bypass via 'downloadtype' Parameter
summary: >-
  The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not
  properly restrict access to protected WooCommerce product downloads, allowing
  unauthenticated users to bypass the payment requirement and retrieve any
  product…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cvssSource: adp
cwe:
  - CWE-862
product: ElementsReady Addons for Elementor
affected:
  - elementsready_addons_for_elementor <= 6.7.2
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-19T09:23:05.470070Z'
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T09:31:19.699Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-91047'
references:
  - url: 'https://wpscan.com/vulnerability/08afea88-4268-40b3-b5fb-0ac2546c3100/'
tags:
  - cve.org
ingestedAt: '2026-10-19T07:09:59.600Z'
---

## Overview

The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable file.

## Affected

- `elementsready_addons_for_elementor <= 6.7.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.