CVE-2026-110898: Incorrect Privilege Assignment in WPDeveloper Essential Addons for Elementor

The vulnerability identified as CVE-2026-110898 affects WPDeveloper Essential Addons for Elementor (essential-addons-for-elementor-lite) and involves incorrect privilege assignment that enables privilege escalation. This affects all versions from the initial release up to and including 6.8.5. The CVSS 3.1 base score is 6.4, with attack vector network, attack complexity high, privileges required high, user interaction required, and impacts confidentiality, integrity, and availability. No vendor advisory or patch information is provided in the input data.

Successful exploitation could allow an attacker with high privileges and user interaction to escalate privileges further, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. However, exploitation requires existing high privileges and user interaction, which limits the ease of exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to high privilege accounts and monitor for suspicious activity involving the Essential Addons for Elementor plugin. Avoid granting unnecessary privileges to users.