CVE-2026-66575: KingAddons.com King Addons for Elementor, заобикаляне

Описание

Оригинално описание

Unauthenticated Insecure Direct Object References (IDOR) in King Addons for Elementor <= 51.1.81 versions.

Засегнати продукти

• KingAddons.com King Addons for Elementor: n/a до 51.1.81

Вид слабост

• CWE-639 Authorization Bypass Through User-Controlled Key

История

Други уязвимости в KingAddons.com King Addons for Elementor

• 6.5CVE-2026-96835
• 10.0CVE-2025-6327
• 9.8CVE-2025-6325
• 6.5CVE-2025-62889
• 6.5CVE-2025-62887

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-66575
• https://nvd.nist.gov/vuln/detail/CVE-2026-66575
• https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-81-insecure-direct-object-references-idor-vulnerability?_s_id=cve