CVE-2023-32243

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

76%p99

Published

May 12, 2023 (May 12, 2023)

Modified

Jun 17, 2026

Description

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

Vendors: wpdeveloper
Products: essential addons for elementor
Ecosystems: WordPress
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (75.5%)

In the news3 stories

New Flaw in WordPress Plugin Used by Over a Million Sites Under Active Exploitation

The Hacker NewsMay 20, 04:02 UTC · May 20, 2023Exploit / PoC in the wildCVE-2023-32243

Essential Addons Plugin Flaw Exposes One Million WordPress Websites

Infosecurity MagazineMay 12, 16:30 UTC · May 12, 2023Vulnerability CVE-2023-32243

A flaw in the Essential 'Addons for Elementor' WordPress plugin poses 1M sites at risk of hacking

Security AffairsMay 12, 08:10 UTC · May 12, 2023Vulnerability CVE-2023-32243