Medium · 5.4 CVE-2023-41656 EUVD-2023-46148GHSA-5884-m867-xg58

WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability

Published Dec 29, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wpdive Product: Better Elementor Addons

Description

Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Elementor Addons: from n/a through 1.3.7.

Affected products

Vendor	Product	Affected	Fixed
wpdive	Better Elementor Addons	≤ 1.3.7	—

References

https://vdp.patchstack.com/database/wordpress/plugin/better-elementor-addons/vulnerability/wordpress-better-elementor-addons-plugin-1-3-5-broken-access-control-vulnerability?_s_id=cve vdb-entry