Medium · 6.5 CVE-2026-25403 EUVD-2026-53938GHSA-5m93-65m5-p9q5

WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability

Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack

Vendor: bdthemes Product: Ultimate Store Kit Elementor Addons

Description

Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.

Affected products

Vendor	Product	Affected	Fixed
bdthemes	Ultimate Store Kit Elementor Addons	≤ 3.0.5	—

References

https://patchstack.com/database/wordpress/plugin/ultimate-store-kit/vulnerability/wordpress-ultimate-store-kit-elementor-addons-plugin-3-0-5-broken-access-control-vulnerability?_s_id=cve vdb-entry