CVE-2026-1004 - Essential Addons for Elementor <= 6.5.5 - missing authorization to unauthenticate...

CVE ID : CVE-2026-1004 Published : Jan. 16, 2026, 9:16 a.m. | 51 minutes ago Description : The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 6.5.5 via the 'eael_product_quickview_popup' function. This makes it possible for unauthenticated attackers to retrieve WooCommerce product information for products with draft, pending, or private status, which should normally be restricted. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...