Skip to content
OpenAdvisories
Low · 2.7 CVE-2026-32445 EUVD-2026-11989GHSA-fcmh-8r9j-5762

WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.

Affected products

VendorProductAffectedFixed
Elementor Elementor Website Builder ≤ 3.35.5 —

References