{"id":"CVE-2026-110537","published":"2026-10-23T06:17:05.693","lastModified":"2026-10-23T14:20:57.920","description":"The Essential Addons for Elementor  WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its login-approval feature, checking only a site-level capability, which on WordPress Multisite could allow a subsite administrator to change the approval and login state of accounts belonging to other sites on the network.","cvssScore":3.8,"cvssSeverity":"LOW","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/672ddaeb-b42f-4b8b-83ce-83e15899d651/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}