Now officially on WordPress.org

CVE Database / CVE-2026-32445

CVE · Low

CVE-2026-32445 — Elementor Website Builder – more than just a page builder [elementor] < 3.35.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-32445 Elementor Website Builder – more than just a page builder [elementor] < 3.35.6 Missing Authorization Low 2.7 < 3.35.6 3.35.6 2026-03-07 —

CVE-2026-32445

A security flaw exists in the Elementor Website Builder plugin for WordPress, allowing malicious users with elevated permissions to bypass intended controls on a specific function due to inadequate authorization checks up to version 3.35.5. This vulnerability enables attackers with author-level access or higher to execute unauthorized actions within the affected system.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings