PT-2026-23273 · Unknown · Lms Elementor Pro

Luc · Publicado 2026-03-05 · Atualizado 2026-03-18 · CVE-2026-27983

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LMS Elementor Pro versions through 1.0.4

Description A privilege assignment issue exists in LMS Elementor Pro that could allow for privilege escalation. The issue allows an attacker to gain elevated privileges within the system.

Recommendations Update LMS Elementor Pro to a version later than 1.0.4.

Correção

LPE

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2026-27983

Produtos afetados

Lms Elementor Pro

Referências · 4

• https://twitter.com/CVEnew/status/2029654757023850698 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/lms-elementor-pro/vulnerability/wordpress-lms-elementor-pro-plugin-1-0-4-privilege-escalation-vulnerability?_s_id=cve · Nota
• https://twitter.com/MNovofastovsky/status/2034212263301628254 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-27983 · Nota de Segurança