https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:50:16.876420+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-3124 CVE-2023-3124 — Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option 2026-10-05T03:50:16.893054+00:00

Affected: https://elementor.com/ Elementor Website Builder Pro

The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update arbitrary site options, which can lead to privilege escalation.