Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, and including, 1.4.4. This is due to the 'easyel_handle_register' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-20 | 1 | Patch1 |
| 2026-06-05 | 1 | General1 |
🚨 CVE-2026-7284 — CVSS 9.8/10 ██████████ The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/t43m7SUzju
Post summary
A critical privilege‑escalation flaw (CVE‑2026‑7284) in the Easy Elements for Elementor plugin is disclosed with a CVSS score of 9.8, and immediate patching is urged.
【緊急】CVE-2026-7284 Easy Elements for Elementor – Addons & Website Templatesに深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/06/03/cve-2026-7284-easy-elements-for-elementor-addons-website-templates/ #IT #Security #cybersecurity
Post summary
The post merely links to a reference for CVE‑2026‑7284 without offering any additional technical or operational context.