PT-2026-50328 · Powerpackelements+1 · Powerpack Pro For Elementor+1

Nguyen Ba Khanh

·

CVE-2026-42629

·

Published

2026-04-29

·

Updated

2026-06-17

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PowerPack Pro for Elementor versions prior to 2.13.0
Description Broken authentication allows unauthenticated attackers to perform unauthorized actions due to a missing capability check in a function within the plugin.
Recommendations Update PowerPack Pro for Elementor to version 2.13.0 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-42629

Affected Products

Powerpack Pro For Elementor
Powerpack-Elements