WordPress Plugin Vulnerabilities

Essential Addons for Elementor < 6.8.1 - Unauthenticated Captcha Bypass

Description

The plugin is vulnerable to Captcha Bypass, making it possible for unauthenticated attackers to bypass Captcha.

Affects Plugins

Plugin icon
essential-addons-for-elementor-lite
Fixed in 6.8.1

References

CVE
CVE-2026-81777
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/a151c680-2bcf-4b36-aa6e-9694c6d3d0c7

Miscellaneous

Original Researcher
Gaurav popalghat
Verified
No
WPVDB ID
cb8df218-585e-474e-bfbc-c2fcbeab887b

Timeline

Publicly Published
2026-08-27 (about 1 month ago)
Added
2026-09-02 (about 1 month ago)
Last Updated
2026-09-02 (about 1 month ago)

Other

Published
Title
Published
2025-11-10
Title
Hydra Booking < 1.1.28 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation
Published
2022-11-09
Title
Better Messages < 1.9.10.71 - Subscriber+ Messaging Block Bypass
Published
2021-04-21
Title
iThemes Security Free (< 7.9.1) & Pro (< 6.8.4) - Hide Backend Bypass
Published
2024-08-30
Title
IP Vault – WP Firewall < 2.1 - IP Address Spoofing to Protection Mechanism Bypass
Published
2026-07-20
Title
CoCart < 4.9.0 - Unauthenticated Arbitrary Price Manipulation