CVE-2026-59511

Full vulnerability record from the local CVENow database.

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrieve Embedded Sensitive Data. This issue affects Exclusive Addons Elementor: from n/a through 2.7.9.9.

Severity

MEDIUM

CVSS score

5.3 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-07-05 22:16:53.223000

Last modified

2026-10-25 15:10:00.147000

View original CVE JSON

{
  "id": "CVE-2026-59511",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-05T22:16:53.223",
  "lastModified": "2026-10-25T15:10:00.147",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Exclusive Addons Elementor: from n/a through 2.7.9.9."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inserción de información sensible en datos enviados en Tim Strifler Exclusive Addons Elementor permite recuperar datos sensibles incrustados.\n\nEste problema afecta a Exclusive Addons Elementor: desde n/a hasta 2.7.9.9."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Tim Strifler",
          "product": "Exclusive Addons Elementor",
          "defaultStatus": "unaffected",
          "collectionURL": "https://wordpress.org/plugins",
          "packageName": "exclusive-addons-for-elementor",
          "versions": [
            {
              "version": "n/a",
              "lessThanOrEqual": "2.7.9.9",
              "versionType": "custom",
              "status": "affected",
              "changes": [
                {
                  "at": "2.8.0",
                  "status": "unaffected"
                }
              ]
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-06T13:47:46.069508Z",
          "id": "CVE-2026-59511",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-201"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://patchstack.com/database/wordpress/plugin/exclusive-addons-for-elementor/vulnerability/wordpress-exclusive-addons-elementor-plugin-2-7-9-9-sensitive-data-exposure-vulnerability?_s_id=cve",
      "source": "[email protected]"
    }
  ]
}