Vulnerability · Published Jun 17, 2026 · Assigned by Patchstack
CVE-2026-42629WordPress PowerPack Pro for Elementor plugin < v2.13.0 - Broken Authentication vulnerability
High 8.8
In plain English
A high-severity authentication bypass in PowerPack Pro for Elementor from Powerpackelements. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.3%top 75.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Powerpackelements | PowerPack Pro for Elementor | n/a – before v2.13.0 |
Weakness: CWE-288 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H