MEDIUM

CVE-2026-57619

2026-06-25 CVSS v3.1

CVSS

6.5

Description

Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions.

Summary dbcve.org

This is a sensitive data exposure vulnerability in Elementor Website Builder affecting versions 4.1.3 and earlier. The vulnerability allows users with Contributor-level permissions to access sensitive data that should be restricted to higher-privilege roles, representing a broken access control issue.

Mitigation

Update Elementor Website Builder to a version newer than 4.1.3. If immediate update is not possible, review and restrict Contributor role permissions to prevent access to sensitive content or consider role-based access control plugins.

Weakness (CWE)

CWE-862 Missing Authorization

EPSS Score

0.37%

Probability of exploitation in next 30 days

30.9th percentile

References

https://patchstack.com/database/wordpress/plugin/elementor/vulnerability/wordpress-elementor-website-builder-plugin-4-1-3-sensitive-data-exposure-vulnerability?_s_id=cve

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE