CVE-2026-119465: WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

Q: Which plugin versions are affected?

The issue affects Elementor Addon Elements through version 1.15. The available data does not identify a fixed version.

Q: What information could an attacker obtain?

The vulnerability is described as allowing retrieval of embedded sensitive data. The provided information does not specify the data types, affected components, or access conditions required to retrieve it.

Published Nov 7, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows Retrieve Embedded Sensitive Data.This issue affects Elementor Addon Elements: from n/a through 1.15.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Elementor Addon Elements to a version that resolves this vulnerability.
Fixed in 1.15.1

Event History

Nov 7, 2026

CVE Published

via MITRE·09:28 AM

Data Sourced

via MITRE·09:28 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which plugin versions are affected?

The issue affects Elementor Addon Elements through version 1.15. The available data does not identify a fixed version.

What information could an attacker obtain?

The vulnerability is described as allowing retrieval of embedded sensitive data. The provided information does not specify the data types, affected components, or access conditions required to retrieve it.

CVE-2026-119465: WordPress Elementor Addon Elements plugin <= 1.15 - Sensitive Data Exposure vulnerability

Remediation

Event History

Frequently Asked Questions

Which plugin versions are affected?

What information could an attacker obtain?

Company

Resources

Contact

Frequently Asked Questions

Which plugin versions are affected?

What information could an attacker obtain?