Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders, CVE-2026-1004
- CVE, Research URL
- Home page URL
- Application
- Published on
- Jan 16, 2026
- Research Description
- The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 6.5.5 via the 'eael_product_quickview_popup' function. This makes it possible for unauthenticated attackers to retrieve WooCommerce product information for products with draft, pending, or private status, which should normally be restricted.
- Affected versions
-
max 6.5.6.
- Status
-
vulnerable