CVE-2026-91047: ElementsReady Addons for Elementor 0 through 6.7.2

Affected technology

ElementsReady Addons for Elementor · 0 through 6.7.2
Vendor not specified by the source

Description’s affected range: through 6.7.2 does not properly restrict access to protected WooCommerce product downloads

Component: Not specified by the source

What an attacker can do

Unauthenticated users can bypass the payment requirement and retrieve any product's paid downloadable file.