CVE-2026-32445CWE-862

WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability

Low · published March 13, 2026

CVSS v3.1
2.7
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-03-13T11:42Z
EPSS history
Timeline
  • 13 MAR 11:42Z
    WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability
    cvelistv5