Medium · 5.4 CVE-2025-46259 EUVD-2025-19674GHSA-w6pf-9jwr-2f6q

WordPress The Plus Addons for Elementor - Pro Plugin < 6.3.7 - Broken Access Control vulnerability

Published Jul 1, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: POSIMYTH Innovation Product: The Plus Addons for Elementor Pro

Description

Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Pro: from n/a before 6.3.7.

Affected products

Vendor	Product	Affected	Fixed
POSIMYTH Innovation	The Plus Addons for Elementor Pro	< 6.3.7	6.3.7

References

https://patchstack.com/database/wordpress/plugin/theplus_elementor_addon/vulnerability/wordpress-the-plus-addons-for-elementor-pro-plugin-6-1-0-broken-access-control-vulnerability?_s_id=cve vdb-entry