The vulnerability identified as CVE-2026-23543 affects the Essential Addons for Elementor plugin by WPDeveloper. It is caused by missing authorization checks, which means that certain actions or data may be accessible without proper permission verification. This issue affects versions up to and including 6.5.5. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with a low complexity and only impacts confidentiality. No vendor advisory or patch information is available at this time.

An attacker can exploit this missing authorization vulnerability to access certain data or functionality that should be restricted, potentially leading to limited confidentiality loss. There is no impact on integrity or availability reported. The vulnerability does not require user interaction or prior privileges, increasing its exposure risk. However, no known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from WPDeveloper and consider restricting access to the plugin's features where possible. No vendor-provided mitigation or temporary fix information is currently available.