CVE-2026-65502: WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.

Affected Software

1 affected component

Element Pack Elementor Addons<=8.7.13

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Element Pack Elementor Addons Plugin to a version that resolves this vulnerability.
Fixed in 8.7.14

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-65502 is medium with a CVSS score of 5.3.

CVE-2026-65502 is an unauthenticated bypass vulnerability affecting the Element Pack Elementor Addons plugin.

To fix CVE-2026-65502, update the Element Pack Elementor Addons plugin to a version greater than 8.7.13.

Users of the Element Pack Elementor Addons plugin version 8.7.13 or lower are affected by CVE-2026-65502.

CVE-2026-65502 allows attackers to bypass CAPTCHA protections in the Element Pack Elementor Addons plugin.