CVE-2023-32243

Summary

CVE	CVE-2023-32243
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-05-12 08:15:00 UTC
Updated	2023-05-23 20:17:00 UTC
Description	Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

Risk And Classification

Problem Types: CWE-287

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Wpdeveloper	Essential Addons For Elementor	All	All	All	All

References

Reference	Source	Link	Tags
WordPress Elementor Lite 5.7.1 Arbitrary Password Reset ≈ Packet Storm	MISC	packetstormsecurity.com
Critical Privilege Escalation in Essential Addons for Elementor Plugin Affecting 1+ Million Sites	MISC	patchstack.com
WordPress Essential Addons for Elementor plugin 5.4.0-5.7.1 - Unauthenticated Privilege Escalation vulnerability - Patchstack	MISC	patchstack.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

150686 WordPress Essential Addons for Elementor Plugin: Improper Authentication Vulnerability (CVE-2023-32243)