Medium · 5.4 CVE-2026-49782 EUVD-2026-33933GHSA-j56r-2c4g-4gw4

WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability

Published Jun 2, 2026 · Updated Jun 2, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Elementor Website Builder: from n/a through 4.1.0.

Vendor	Product	Affected	Fixed
Elementor	Elementor Website Builder	≤ 4.1.0	—