PT-2026-25289 · Elementor · Elementor Website Builder

Davidfdzmorilla · Publicado 2026-03-13 · Atualizado 2026-03-14 · CVE-2026-32445

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Elementor Website Builder versions prior to 3.35.5

Description An authorization issue exists in Elementor Website Builder. The issue involves exploiting incorrectly configured access control security levels. No information was provided regarding the number of potentially affected devices or any real-world incidents. The vulnerability allows bypassing intended access restrictions.

Recommendations Update Elementor Website Builder to a version newer than 3.35.5.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-32445

Produtos afetados

Elementor Website Builder

Referências · 4

• https://twitter.com/CVEnew/status/2032831409963114740 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/elementor/vulnerability/wordpress-elementor-website-builder-plugin-3-35-5-broken-access-control-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32445 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2032641777694302641 · Publicação no Twitter