What is CVE-2026-25403?
This vulnerability affects the Ultimate Store Kit Elementor Addons plugin up to version 3.0.5. Due to unauthenticated broken access control, unauthorized attackers can gain access to restricted functionalities without authentication. Immediate update to the latest version is recommended.
Azərbaycanca: Bu boşluq Ultimate Store Kit Elementor Addons plaginini 3.0.5-ə qədər olan versiyalarında təsir edir. Doğrulama olmadan zəif giriş nəzarəti (Broken Access Control) səbəbindən autentifikasiya olunmamış hücumçular məhdud funksiyalara icazəsiz çıxış əldə edə bilər. Plagini dərhal ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-306
FAQ2
Which plugin and versions are affected by CVE-2026-25403?
This vulnerability affects the Ultimate Store Kit Elementor Addons plugin up to version 3.0.5.
Is authentication required to exploit CVE-2026-25403?
No, the vulnerability is caused by unauthenticated broken access control, allowing attackers to gain unauthorized access without authentication.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.