Security Advisory

CVE-2026-1004

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-16 08:23:37

Last updated 2026-04-08 16:33:51

Assigner Wordfence

State PUBLISHED

Description

The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 6.5.5 via the eael_product_quickview_popup function. This makes it possible for unauthenticated attackers to retrieve WooCommerce product information for products with draft, pending, or private status, which should normally be restricted.

← Browse all CVEs View on cve.org ↗