What is GHSA-gwpw-wwmj-xgqp?

GHSA-gwpw-wwmj-xgqp is a security advisory published by GitHub Security Advisories with Low severity. The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability,...

Which CVE IDs does GHSA-gwpw-wwmj-xgqp cover?

GHSA-gwpw-wwmj-xgqp covers the following CVE IDs: CVE-2026-84903. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gwpw-wwmj-xgqp?

GHSA-gwpw-wwmj-xgqp has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-gwpw-wwmj-xgqpLowCVSS 2.7

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability,...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-84903 →

📋 Description

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-84903
https://wpscan.com/vulnerability/57853db6-c9e0-4b0a-8a57-8287f0e85eea
https://github.com/advisories/GHSA-gwpw-wwmj-xgqp