CVE-2026-49052: WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability
Published May 27, 2026
·Updated
Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects ElementsKit Elementor addons Lite: from n/a through 3.9.6.
Affected Software
1 affected component
Wpmet ElementsKit Elementor addons Lite<=3.9.6
Event History
May 27, 2026
CVE Published
via MITRE·02:55 PM
Data Sourced
via MITRE·02:55 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-49052?
CVE-2026-49052 has a medium severity rating of 4.3.
2
How do I fix CVE-2026-49052?
To fix CVE-2026-49052, update the Wpmet ElementsKit Elementor addons Lite plugin to version 3.9.7 or later.
3
What is the impact of the vulnerability identified as CVE-2026-49052?
CVE-2026-49052 can lead to insufficient authorization and potentially allow unauthorized access to sensitive features.
4
Which versions of Wpmet ElementsKit Elementor addons Lite are affected by CVE-2026-49052?
CVE-2026-49052 affects all versions of Wpmet ElementsKit Elementor addons Lite from n/a up to and including 3.9.6.
5
What type of vulnerability is CVE-2026-49052 classified as?
CVE-2026-49052 is classified as a Broken Access Control vulnerability.