This vulnerability (CVE-2026-65502) in bdthemes Element Pack Elementor Addons allows unauthenticated attackers to bypass authentication mechanisms by spoofing. It affects all versions up to and including 8.7.13. The weakness is categorized under CWE-290 (Authentication Bypass by Spoofing). The CVSS v3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and limited integrity impact. No official patch or remediation guidance is currently available from the vendor, and no known exploits are reported in the wild.

The vulnerability enables attackers to bypass authentication controls without privileges or user interaction, potentially allowing unauthorized actions that affect the integrity of the system. There is no impact on confidentiality or availability. Given the medium severity, the risk is moderate but should be addressed to prevent misuse.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected plugin or disabling it if feasible.