Medium · 4.3 CVE-2026-49052 EUVD-2026-32543GHSA-cf5w-c59m-3p6w

WordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability

Published May 27, 2026 · Updated May 27, 2026 · Assigned by Patchstack

Vendor: Wpmet Product: ElementsKit Elementor addons Lite

Description

Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects ElementsKit Elementor addons Lite: from n/a through 3.9.6.

Affected products

Vendor	Product	Affected	Fixed
Wpmet	ElementsKit Elementor addons Lite	≤ 3.9.6	—

References

https://patchstack.com/database/wordpress/plugin/elementskit-lite/vulnerability/wordpress-elementskit-elementor-addons-lite-plugin-3-9-6-broken-access-control-vulnerability?_s_id=cve vdb-entry