https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T19:36:44.296754+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110537 CVE-2026-110537 — Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action 2026-10-25T19:36:44.298778+00:00

Affected: Unknown Essential Addons for Elementor

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its login-approval feature, checking only a site-level capability, which on WordPress Multisite could allow a subsite administrator to change the approval and login state of accounts belonging to other sites on the network.