Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.116 - Authenticated (Author+) Missing Authorization to Attachment Metadata Modification via Upload Media AI Ability
- ID
- WPSEC-2026-1755
- Plugin
- Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates (premium-addons-for-elementor)
- Affected
- from 4.11.88 before 4.11.117
- Remediation
- Update to 4.11.117 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-862
- Usage
- Plugin High · Affected versions High among sites WPSec scans, 2026-10-27
- Attack surface
- Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates on WPSec AttackSurface
- Fix released
- Published
Description
The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data via the Upload Media AI ability in versions 4.11.88 up to, and including, 4.11.116, due to a missing object-level capability check on the reused-attachment branch. The ability only checks the upload_files capability. When the supplied source URL matches an attachment that was added to the media library from that URL earlier, the caller's alt text and title are written to that attachment without checking that the caller can edit it. This makes it possible for authenticated attackers, with Author-level access and above, who know the source URL of such an attachment to overwrite the alt text and title of media uploaded by other users, including administrators. The AI Abilities feature must be enabled.
References
- https://wpsec.com/vuln/WPSEC-2026-1755/
- https://plugins.svn.wordpress.org/premium-addons-for-elementor/tags/4.11.117/
- https://wordpress.org/plugins/premium-addons-for-elementor/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS