CVE-2026-25403: WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.

Affected Software

1 affected component

WordPress Ultimate Store Kit Elementor Addons<=3.0.5

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Ultimate Store Kit Elementor Addons to a version that resolves this vulnerability.
Fixed in 3.0.7

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-25403 has a medium severity rating of 6.5.

To mitigate CVE-2026-25403, update the Ultimate Store Kit Elementor Addons plugin to version 3.0.6 or later.

CVE-2026-25403 is classified as a Broken Access Control vulnerability.

CVE-2026-25403 affects the WordPress Ultimate Store Kit Elementor Addons plugin versions 3.0.5 and earlier.

CVE-2026-25403 was published on August 6, 2026.