# Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.111 - Unauthenticated Sensitive Information Exposure via Search Form 'post_type' Parameter

- **ID:** WPSEC-2026-1003
- **Plugin:** Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates (`premium-addons-for-elementor`), https://wordpress.org/plugins/premium-addons-for-elementor/
- **Affected versions:** all versions before 4.11.112
- **Fixed in:** 4.11.112 (Update to 4.11.112 or later.)
- **Severity:** Medium 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
- **Weakness:** CWE-200
- **Usage among sites WPSec scans:** plugin High, affected versions High (as of 2026-10-15)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/premium-addons-for-elementor
- **Fix released:** 2026-10-14
- **Published:** 2026-10-15
- **URL:** https://wpsec.com/vuln/WPSEC-2026-1003/

## Description

The Premium Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure via the Search Form widget's AJAX search (premium_get_search_results) in all versions up to, and including, 4.11.111. This is due to the post type sent in the request being passed straight into the search query without being limited to public, searchable post types. This makes it possible for unauthenticated attackers to search for and read published entries of non-public or search-excluded post types, such as Elementor templates or WooCommerce coupons.

## References

- https://wpsec.com/vuln/WPSEC-2026-1003/
- https://plugins.svn.wordpress.org/premium-addons-for-elementor/tags/4.11.112/
- https://wordpress.org/plugins/premium-addons-for-elementor/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-1003/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.