← Back to CVE List
CVE-2026-84903NVD
Description
The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.
Affected & Patched Versions
| Product | Affected Versions | Patched Version |
|---|---|---|
| Unknown King Addons for Elementor | 0 - < 51.1.81 | N/A |