UNKNOWNCVE-2025-67588
Elementor Website Builder <= 3.33.0 - Missing Authorization
Platform
wordpress
Component
elementor
Fixed in
3.33.1
The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.33.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.
How to fix
Update to version 3.33.1, or a newer patched version
Monitor your dependencies automatically
Get notified when new vulnerabilities affect your projects. Free forever.
Start free