Essential Addons for Elementor flagged with privilege escalation flaw (EUVD-2026-114227)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- wpdevteam
- Product
- Essential Addons for Elementor
- First seen
Summary
The EUVD entry EUVD-2026-114227, relayed via a Mastodon post, lists a CVSS v3.1 score of 7.4 for Essential Addons for Elementor. The entry says the plugin is vulnerable to privilege escalation in all versions up to and including 6.8.7.
If you use wpdevteam
Update Essential Addons for Elementor to a version newer than 6.8.7
Check the EUVD entry for patch status
Review WordPress user accounts for unexpected role changes
Update easy.jobs to the latest fixed version once available
Check the EUVD entry for patch status and affected versions
Review job listings and career page content for injected scripts
What the sources say 2
· Mastodon: “The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cov” Source
· Mastodon: “The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.8.7 via the `page” Source