CVE-2026-114182: WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability is network-accessible and has low attack complexity, but the attacker must already hold low-level privileges. No user interaction is required.

Q: What is the expected security impact?

The published vector indicates low confidentiality impact, with no integrity or availability impact identified.

Q: Which plugin versions are affected?

PowerPack Addons for Elementor versions through 3.1.0 are affected. The available data does not identify a fixed version.

Published Oct 22, 2026

Updated

Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0.

Affected Software

1 affected component

IdeaBox Creations PowerPack Addons for Elementor<=3.1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress PowerPack Addons for Elementor to a version that resolves this vulnerability.
Fixed in 3.1.1

Event History

Oct 22, 2026

CVE Published

via MITRE·06:53 AM

Data Sourced

via MITRE·06:53 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability is network-accessible and has low attack complexity, but the attacker must already hold low-level privileges. No user interaction is required.

What is the expected security impact?