Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_post_grid_load_more' function in all versions up to, and including, 1.3.2. This makes it possible for unauthenticated attackers to retrieve protected (draft, future, pending) post titles and excerpts that should not be accessible to unauthenticated users.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-2295 Unauthenticated Data Exposure in WPZOOM Addons for Elementor Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2295
Post summary
A newly disclosed vulnerability (CVE‑2026‑2295) enables unauthenticated data exposure in the WPZOOM Addons for Elementor Plugin.
CVE-2026-2295 The WPZOOM Addons for Elementor – Starter Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the… https://www.cve.org/CVERecord?id=CVE-2026-2295
Post summary
The post announces the CVE-2026-2295 vulnerability in the WPZOOM Addons for Elementor plugin, noting unauthorized data access due to a missing capability check, but provides no PoC, exploit, patch, or evidence of active exploitation.