CVE-2026-59511CWE-201

WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerability

Medium · published July 5, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrieve Embedded Sensitive Data.

This issue affects Exclusive Addons Elementor: from n/a through 2.7.9.9.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-07-05T21:36Z
EPSS history
Timeline
  • 05 JUL 21:36Z
    WordPress Exclusive Addons Elementor plugin <= 2.7.9.9 - Sensitive Data Exposure vulnerability
    cvelistv5