{"id":"CVE-2026-110508","published":"2026-10-28T11:17:14.680","lastModified":"2026-10-28T18:17:06.263","description":"The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an administrator when both features are enabled.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/77c4b22a-b1c2-4b65-b98c-e07489f94864/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}