Description
Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| blazethemes | News Kit Elementor Addons | ≤ 1.5.0 | — |
High · 8.8
CVE-2026-118073
EUVD-2026-112990GHSA-hr4j-fhxq-9p82
WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack