Approved changes feed: RSS · Atom

cpe:2.3:a:wpdevteam:essential_addons_for_elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpdevteam (a4902ce9-e562-585a-9979-c349db19e370)
ProductEssential Addons For Elementor (bd6640ef-084d-50e1-b6e2-056e4eb3ce54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3779 vulnerable 2026-06-03 14:52:41.878928 Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
MEDIUM (5.3)
The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers to obtain a site's MailChimp API key. We recommend resetting any MailChimp API keys if running a vulnerable version of this plugin with the MailChimp block enabled as the API key may have been compromised. This only affects sites running the premium version of the plugin and that have the Mailchimp block enabled on a page.
Published: 2023-07-20T05:38:59.848Z
Updated: 2026-04-08T17:28:37.307Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.