PT-2026-25289 · Elementor · Elementor Website Builder

Davidfdzmorilla · Published 2026-03-13 · Updated 2026-03-14 · CVE-2026-32445

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Elementor Website Builder versions prior to 3.35.5

Description An authorization issue exists in Elementor Website Builder. The issue involves exploiting incorrectly configured access control security levels. No information was provided regarding the number of potentially affected devices or any real-world incidents. The vulnerability allows bypassing intended access restrictions.

Recommendations Update Elementor Website Builder to a version newer than 3.35.5.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-32445

Affected Products

Elementor Website Builder

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-32445 · Security Note
• https://twitter.com/CVEnew/status/2032831409963114740 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/elementor/vulnerability/wordpress-elementor-website-builder-plugin-3-35-5-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2032641777694302641 · Twitter Post