CVE-2026-118073: WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

Q: What level of access does an attacker need to exploit this issue?

The issue is described as subscriber PHP object injection, so exploitation requires subscriber-level access. It does not require user interaction.

Q: Can this vulnerability be exploited remotely?

Yes. The CVSS vector identifies network attack access with low attack complexity, indicating an authenticated subscriber can attempt exploitation remotely.

Q: What impact could successful exploitation have?

The CVSS vector rates confidentiality, integrity, and availability impact as high. A successful exploit could therefore expose data, alter data, or disrupt service.

Q: Which plugin versions are affected?

News Kit Elementor Addons versions 1.5.0 and earlier are identified as affected.

Published Oct 29, 2026

Updated

Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced

via MITRE·03:24 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The issue is described as subscriber PHP object injection, so exploitation requires subscriber-level access. It does not require user interaction.

Can this vulnerability be exploited remotely?

Yes. The CVSS vector identifies network attack access with low attack complexity, indicating an authenticated subscriber can attempt exploitation remotely.

What impact could successful exploitation have?

The CVSS vector rates confidentiality, integrity, and availability impact as high. A successful exploit could therefore expose data, alter data, or disrupt service.

Which plugin versions are affected?

News Kit Elementor Addons versions 1.5.0 and earlier are identified as affected.

CVE-2026-118073: WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Can this vulnerability be exploited remotely?

What impact could successful exploitation have?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Can this vulnerability be exploited remotely?

What impact could successful exploitation have?

Which plugin versions are affected?