$PATCH CAsoon

Advisory feed · Saturday, 24 October 20264,534 CVEs published in the last 7 daysSource: NVD, read hourlyAdvisory feedDemo · pretend coins and SOL. The CVE records are real.

TLP:CLEARReceivedPublished 24 Oct 2026 · Updated 24 Oct 2026

CVE-2026-97352

·Not scored yetNo CVSS score yet

The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from the WordPress.org repository.

No CVSS vector yet. NVD or the CNA hasn’t scored this record.

Affected software: News Kit Addons For Elementor
Versions: before 1.4.9
Weakness: Not stated
Assigned by: wpscan.com
NVD status: Received

ReferencesNVD https://nvd.nist.gov/vuln/detail/CVE-2026-97352 CVE.org https://www.cve.org/CVERecord?id=CVE-2026-97352 https://wpscan.com/vulnerability/36f192be-f684-494c-8b37-9dd006407b6f/

The record above is NVD’s, word for word, as read before NVD finished its analysis. Coins say nothing about the flaw.

Launch a coin on CVE-2026-97352

Coins filed under CVE-2026-97352

No coins filed yet.

Be the first to file a coin under CVE-2026-97352.

File the first coin

CVE-2026-97352 · Patch Day