CVE ID :CVE-2026-15155 Published : July 11, 2026, 7:16 a.m. | 1 hour, 16 minutes ago Description :The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authenticated Account Takeover via Email Header Injection in all versions up to,...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-15155 - Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection

VERWANDTEARTIKEL

CVE-2025-6784 - Code Engine <= 0.3.5 - Authenticated (Contributor+) Remote Code Execution

CVE-2026-7655 - SureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook

CVE-2026-33017

CVE-2026-2354 - Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()

CVE-2026-14262 - Simple JWT Login <= 3.6.6 - Authenticated (Subscriber+) Authentication Bypass to Privilege Escalation via 'payload' Parameter

CVE-2026-13353 - WP Ultimate CSV Importer <= 8.0.1 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via 'MappedFields' Parameter