CVE-2026-2385 | The Plus Addons for Elementor Plugin up to 6.4.7 on WordPress AJAX email_data Remote Code Execution

A vulnerability categorized as critical has been discovered in The Plus Addons for Elementor Plugin up to 6.4.7 on WordPress. The affected element is an unknown function of the component AJAX Handler. Executing a manipulation of the argument email_data can lead to Remote Code Execution.

This vulnerability is registered as CVE-2026-2385. It is possible to launch the attack remotely. No exploit is available.