CVE-2026-4362

The ElementsKit Elementor Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `Live_Action::reset()` function in all versions up to, and including, 3.8.2 The function is hooked to the WordPress `init` action and triggers when both `post` and `action=elementor` GET parameters are present, with no authentication or nonce verification. This makes it possible for unauthenticated attackers to overwrite the Elementor content (`_elementor_data`) of any `elementskit_widget` custom post type by visiting a specially crafted URL. The widget's custom designs, text, and configurations are permanently replaced with a blank template.

• CWE-862

• https://plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.8.0/modules/widget-builder/init.php#L37
• https://plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.8.0/modules/widget-builder/live-action.php#L10
• https://plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.8.0/modules/widget-builder/live-action.php#L27
• https://plugins.trac.wordpress.org/changeset/3499543/elementskit-lite/trunk/modules/widget-builder/live-action.php
• https://plugins.trac.wordpress.org/changeset?old_path=%2Felementskit-lite/tags/3.8.2&new_path=%2Felementskit-lite/tags/3.9.0
• https://www.wordfence.com/threat-intel/vulnerabilities/id/7740fdfb-65b2-4d27-935f-b0e73487f0c4?source=cve

Published

May 5, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4360In the Tarfile.extract() function, the filter parameter is n…5.3
• CVE-2026-43606Observable Timing Discrepancy in the AMD Vitis Libraries ECD…8.5
• CVE-2026-43616Detect-It-Easy prior to 3.21 contains a path traversal vulne…7.8
• CVE-2026-43617Rsync version 3.4.2 and prior contain an authorization bypas…6.3
• CVE-2026-43618Rsync version 3.4.2 and prior contain an integer overflow vu…8.1
• CVE-2026-43619Rsync version 3.4.2 and prior contain symlink race condition…7.2
• CVE-2026-43620Rsync version 3.4.2 and prior contain a receiver-side out-of…5.5
• CVE-2026-43622llama.cpp builds b1886 through b7445 contain a double free v…8.5
• CVE-2026-43623microtar through 0.1.0 contains a stack-based buffer overflo…8.8
• CVE-2026-43624F5-TTS through version 1.1.20 contains a path traversal vuln…8.8
• CVE-2026-43625CodexBar prior to 0.32.0 contains a session cookie leakage v…8.2
• CVE-2026-43627llama.cpp builds b1283 through b9058 contain an integer over…8.5