This vulnerability (CVE-2026-65502) in Element Pack Elementor Addons (<= 8.7.13) is classified as CWE-290: Authentication Bypass by Spoofing. It enables unauthenticated attackers to bypass authentication mechanisms, potentially allowing unauthorized interactions with the affected plugin. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The vulnerability is published and tracked but lacks an official remediation level or patch information. The product is not a cloud service, so remediation depends on vendor patch releases.

The impact is limited to unauthorized actions due to authentication bypass, with no direct confidentiality or availability impact reported. The medium severity score reflects that while the vulnerability can be exploited remotely without privileges, it does not lead to data disclosure or denial of service by itself. No active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, restricting access to the affected plugin or disabling it if feasible may reduce risk.