{"id":"CVE-2026-84903","aliases":["EUVD-2026-82662","GHSA-gwpw-wwmj-xgqp"],"status":"published","title":"King Addons for Elementor \u003c 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode","description":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.","severity":{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00316,"percentile":0.24831,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2026-09-18T06:00:12Z","modified":"2026-09-18T19:08:32Z","products":[{"vendor":"kingaddons.com","product":"king addons for elementor"},{"vendor":"unknown","product":"king addons for elementor"}],"references":[{"url":"https://wpscan.com/vulnerability/57853db6-c9e0-4b0a-8a57-8287f0e85eea/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84903"},{"url":"https://wpscan.com/vulnerability/57853db6-c9e0-4b0a-8a57-8287f0e85eea"},{"url":"https://github.com/advisories/GHSA-gwpw-wwmj-xgqp"}],"sources":{"cve":[{"id":"CVE-2026-84903","title":"King Addons for Elementor \u003c 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode","description":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.","status":"published","published":"2026-09-18T06:00:12.605Z","modified":"2026-09-18T11:12:39.5Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:20:08.391556Z"}],"euvd":[{"id":"EUVD-2026-82662","description":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.","status":"published","published":"2026-09-18T06:00:12Z","modified":"2026-09-18T11:12:39Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T17:28:09.240281Z"}],"ghsa":[{"id":"GHSA-gwpw-wwmj-xgqp","title":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform any capability,...","description":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.","status":"published","published":"2026-09-18T06:31:29Z","modified":"2026-09-18T12:32:18Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:12:10.152672Z"}],"nvd":[{"id":"CVE-2026-84903","description":"The King Addons for Elementor  WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.","status":"published","published":"2026-09-18T06:16:39.52Z","modified":"2026-09-18T19:08:32.83Z","cvss":[{"version":"3.1","score":2.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:12:49.70655Z"}]}}