Skip to content
OpenAdvisories

Vendor

https://elementor.com/

9 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-3124 EPSS 23%

    Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

    The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subsc…