PT-2026-23273 · Unknown · Lms Elementor Pro

Luc · Published 2026-03-05 · Updated 2026-03-18 · CVE-2026-27983

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LMS Elementor Pro versions through 1.0.4

Description A privilege assignment issue exists in LMS Elementor Pro that could allow for privilege escalation. The issue allows an attacker to gain elevated privileges within the system.

Recommendations Update LMS Elementor Pro to a version later than 1.0.4.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-27983

Affected Products

Lms Elementor Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-27983 · Security Note
• https://twitter.com/CVEnew/status/2029654757023850698 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/lms-elementor-pro/vulnerability/wordpress-lms-elementor-pro-plugin-1-0-4-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/MNovofastovsky/status/2034212263301628254 · Twitter Post