Vulnerabilities / Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates / WPSEC-2026-1003
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.111 - Unauthenticated Sensitive Information Exposure via Search Form 'post_type' Parameter
Medium 5.3
CWE-200Fixed in 4.11.112
- ID
- WPSEC-2026-1003
- Plugin
- Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates (premium-addons-for-elementor)
- Affected
- all versions before 4.11.112
- Remediation
- Update to 4.11.112 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin High · Affected versions High among sites WPSec scans, 2026-10-15
- Attack surface
- Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates on WPSec AttackSurface
- Fix released
- Published
Description
The Premium Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure via the Search Form widget's AJAX search (premium_get_search_results) in all versions up to, and including, 4.11.111. This is due to the post type sent in the request being passed straight into the search query without being limited to public, searchable post types. This makes it possible for unauthenticated attackers to search for and read published entries of non-public or search-excluded post types, such as Elementor templates or WooCommerce coupons.
References
- https://wpsec.com/vuln/WPSEC-2026-1003/
- https://plugins.svn.wordpress.org/premium-addons-for-elementor/tags/4.11.112/
- https://wordpress.org/plugins/premium-addons-for-elementor/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS