CVE-2023-47504: Elementor Website Builder

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.

Affected products

• Elementor Website Builder: before 3.16.5 (fixed in 3.16.5)

Published 2024-04-24. Last modified 2026-06-17.