CVE-2026-91047

CVE-2026-91047 published: The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users to bypass the payment requirement and retrieve any product's paid downloadable...

View full NVD advisory → ← Back to CVE watch