Medium · 4.3 CVE-2025-54712 EUVD-2025-24907GHSA-37j6-767f-6qq3

WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: HashThemes Product: Easy Elementor Addons

Description

Missing Authorization vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Elementor Addons: from n/a through <= 2.2.7.

Affected products

Vendor	Product	Affected	Fixed
hashthemes	Easy Elementor Addons	≤ 2.2.7	—

References

https://patchstack.com/database/Wordpress/Plugin/easy-elementor-addons/vulnerability/wordpress-easy-elementor-addons-plugin-plugin-2-2-7-broken-access-control-vulnerability?_s_id=cve vdb-entry