CVE-2026-97352 in News Kit Addons for Elementor Plugininformazioni

Riassunto

di MITRE • 24/10/2026

The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from the WordPress.org repository.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsabile

WPScan

Prenotare

24/09/2026

Divulgazione

24/10/2026

Moderazione

accettato

EPSS

0.00000

KEV

no

Attività

basso

Fonti

Interested in the pricing of exploits?

See the underground prices here!