UNKNOWNCVE-2025-67588

Elementor Website Builder <= 3.33.0 - Missing Authorization

Platform

wordpress

Component

elementor

Fixed in

3.33.1

The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.33.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.

How to fix

Update to version 3.33.1, or a newer patched version

Monitor your dependencies automatically

Get notified when new vulnerabilities affect your projects. Free forever.

Start free