CVE-2026-25028

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-25028", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2026-01-28T09:52:08.057Z", "datePublished": "2026-02-03T14:08:41.754Z", "dateUpdated": "2026-04-28T16:14:54.204Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "elementinvader-addons-for-elementor", "product": "ElementInvader Addons for Elementor", "vendor": "Element Invader", "versions": [{"changes": [{"at": "1.4.2", "status": "unaffected"}], "lessThanOrEqual": "1.4.1", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Legion Hunter | Patchstack Bug Bounty Program"}], "datePublic": "2026-04-01T16:05:31.838Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.<p>This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.1.</p>"}], "value": "Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.1."}], "impacts": [{"capecId": "CAPEC-180", "descriptions": [{"lang": "en", "value": "Exploiting Incorrectly Configured Access Control Security Levels"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "description": "Missing Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-28T16:14:54.204Z"}, "references": [{"tags": ["vdb-entry"], "url": "https://patchstack.com/database/Wordpress/Plugin/elementinvader-addons-for-elementor/vulnerability/wordpress-elementinvader-addons-for-elementor-plugin-1-4-1-broken-access-control-vulnerability?_s_id=cve"}], "title": "WordPress ElementInvader Addons for Elementor plugin <= 1.4.1 - Broken Access Control vulnerability"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-05T14:37:27.133698Z", "id": "CVE-2026-25028", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-28T12:51:07.201Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-25028", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-05T14:37:27.133698Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-05T14:36:32.408Z"}}], "cna": {"title": "WordPress ElementInvader Addons for Elementor plugin <= 1.4.1 - Broken Access Control vulnerability", "credits": [{"lang": "en", "type": "finder", "value": "Legion Hunter | Patchstack Bug Bounty Program"}], "impacts": [{"capecId": "CAPEC-180", "descriptions": [{"lang": "en", "value": "Exploiting Incorrectly Configured Access Control Security Levels"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Element Invader", "product": "ElementInvader Addons for Elementor", "versions": [{"status": "affected", "changes": [{"at": "1.4.2", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "1.4.1"}], "packageName": "elementinvader-addons-for-elementor", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}], "datePublic": "2026-04-01T16:05:31.838Z", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/elementinvader-addons-for-elementor/vulnerability/wordpress-elementinvader-addons-for-elementor-plugin-1-4-1-broken-access-control-vulnerability?_s_id=cve", "tags": ["vdb-entry"]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.1.", "supportingMedia": [{"type": "text/html", "value": "Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.<p>This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.1.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "Missing Authorization"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-28T16:14:54.204Z"}}}, "cveMetadata": {"cveId": "CVE-2026-25028", "state": "PUBLISHED", "dateUpdated": "2026-04-28T16:14:54.204Z", "dateReserved": "2026-01-28T09:52:08.057Z", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "datePublished": "2026-02-03T14:08:41.754Z", "assignerShortName": "Patchstack"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "elementinvader-addons-for-elementor", "product": "ElementInvader Addons for Elementor", "vendor": "Element Invader", "versions": [{"changes": [{"at": "1.4.2", "status": "unaffected"}], "lessThanOrEqual": "1.4.1", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "audit@patchstack.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.1."}, {"lang": "es", "value": "Vulnerabilidad por Autorizaci\u00f3n Faltante en Element Invader ElementInvader Addons para Elementor elementinvader-addons-for-elementor permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a ElementInvader Addons para Elementor: desde n/a hasta &lt;= 1.4.1."}], "id": "CVE-2026-25028", "lastModified": "2026-06-17T10:24:00.540", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "audit@patchstack.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25028", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-05T14:37:27.133698Z", "version": "2.0.3"}}]}, "published": "2026-02-03T15:16:21.163", "references": [{"source": "audit@patchstack.com", "url": "https://patchstack.com/database/Wordpress/Plugin/elementinvader-addons-for-elementor/vulnerability/wordpress-elementinvader-addons-for-elementor-plugin-1-4-1-broken-access-control-vulnerability?_s_id=cve"}], "sourceIdentifier": "audit@patchstack.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "audit@patchstack.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-16T01:08:11.218055+00:00", "value": {"mitigation_remediation": ["Upgrade ElementInvader Addons for Elementor to the latest version that includes the fix for broken access control.", "If a patch is not yet available, restrict plugin administrative pages so that only administrators or users with the \"manage_options\" capability can access them.", "Review and harden role\u2011based permissions for all users to ensure no extra capabilities are granted to non\u2011admin accounts."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized access via broken access control"}, "threat_synthesis": {"affected_systems": "Element Invader \u2013 ElementInvader Addons for Elementor, affecting all installations of the plugin version 1.4.1 and earlier. No specific WordPress core versions are mentioned, but the plugin is applicable to any WordPress site that has installed the vulnerable add\u2011ons.", "description_and_impact": "This vulnerability is a missing authorization flaw that allows attackers to bypass the plugin\u2019s access control mechanisms and gain unrestricted access to its administrative functions. The flaw arises from incorrectly configured security levels within the ElementInvader Addons for Elementor, enabling any user to perform actions intended for privileged administrators. The resulting impact includes potential theft or modification of site content and configuration, thereby compromising confidentiality, integrity, and availability of the WordPress installation. The weakness is identified as CWE\u2011862, which categorizes it as a broken access control issue.", "risk_and_exploitability": "The CVSS score of 5.4 indicates moderate severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation in the wild. The CVE is not listed in the CISA KEV catalog, further indicating low exploitation activity. The attack vector is inferred to be a web\u2011based exploit, likely through plugin\u2011provided endpoints or administrative interfaces that lack proper capability checks. An attacker only needs to reach the affected WordPress instance and could exploit the weakness without prior authentication, depending on the implementation of the plugin\u2019s permission checks."}}}}, "created": "2026-02-04T12:09:43.146363+00:00", "updated": "2026-04-16T01:15:20.531896+00:00", "vendors": ["elementinvader", "elementinvader$PRODUCT$elementinvader_addons_for_elementor", "wordpress", "wordpress$PRODUCT$wordpress"]}