Medium · 4.3 CVE-2023-33922 EUVD-2023-38072GHSA-3c4q-vvc6-w82q

WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability

Published Jun 11, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2.

Vendor	Product	Affected	Fixed
Elementor	Elementor Website Builder	≤ 3.13.2	—