MEDIUM 5.3 NVD

CVE-2026-13345

The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce produ

The Essential Addons for Elementor WordPress plugin before 6.6.10 does not perform authorization, status, or visibility checks when resolving WooCommerce products in its product-comparison feature, allowing unauthenticated users to disclose the title, price, and SKU of draft, pending, and private products that are otherwise withheld from public view.

References

https://wpscan.com/vulnerability/45937bce-12db-4770-9f15-606c62469f6d/

Published: 2026-07-30 · Source: NVD · Feed updated: 2026-08-04

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-07-30 via NVD.

vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.