CVE-2026-110898: WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability
Published Oct 19, 2026
·Updated
Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essential Addons for Elementor: from n/a through 6.8.5.
Affected Software
1 affected component
WPDeveloper Essential Addons for Elementor<=6.8.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
essential-addons-for-elementor-liteto a version that resolves this vulnerability.Fixed in 6.8.6
Event History
Oct 19, 2026
CVE Published
via MITRE·09:09 AM
Data Sourced
via MITRE·09:09 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access and conditions are required for exploitation?
The published vector indicates that an attacker needs network access, high existing privileges, and user interaction. Exploitation is rated as high complexity.
2
Which deployments are in scope?
The issue affects WPDeveloper Essential Addons for Elementor through version 6.8.5. The available data does not identify a lower affected version boundary.