Critical · 9.6 CVE-2026-28164 EUVD-2026-63327GHSA-cghh-6x9c-84pf

WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability

Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery.

This issue affects Easy Elementor Addons: from n/a through 2.3.7.

Vendor	Product	Affected	Fixed
HashThemes	Easy Elementor Addons	≤ 2.3.7	—