CVE-2026-109890: WordPress Premium Addons for Elementor plugin <= 4.11.110 - Broken Access Control vulnerability
Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through 4.11.110.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Premium Addons for Elementorto a version that resolves this vulnerability.Fixed in 4.11.111
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation can be performed over the network with low attack complexity, without privileges or user interaction.
How can I determine whether my site is affected?
Check whether the LeapWorx Premium Addons for Elementor plugin is installed and identify its version. Versions through 4.11.110 are listed as affected; no lower affected version boundary is provided.
What is the expected impact if exploitation succeeds?
The supplied CVSS vector rates confidentiality impact as low and indicates no integrity or availability impact.