What is CVE-2026-15155?

CVE-2026-15155 is a high-severity vulnerability in Wpdevteam Essential Addons For Elementor – Popular Templates & Widgets, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 8.8/10. Published 2026-07-11.

How severe is CVE-2026-15155?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Wpdevteam Essential Addons For Elementor – Popular Templates & Widgets

CVE-2026-15155

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authenticated Account Takeover via Email Header Injection in all versions up to, and including, 6.6.10 This is due to insuffic…

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Wpdevteam Essential Addons For Elementor – Popular Templates & Widgets — versions 0

Weakness classification (CWE)

CWE-640 — Weak Password Recovery Mechanism for Forgotten Password

References

Frequently asked questions

What is CVE-2026-15155?: CVE-2026-15155 is a high-severity vulnerability in Wpdevteam Essential Addons For Elementor – Popular Templates & Widgets, classified under Weak Password Recovery Mechanism for Forgotten Password. CVSS score: 8.8/10. Published 2026-07-11.
How severe is CVE-2026-15155?: High severity. CVSS v3 base score is 8.8 out of 10.