CVE-2023-32243

CriticalPublished

WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

Published: May 12, 2023
Updated: Apr 28, 2026
Assigning CNA: Patchstack
Evidence observed: Aug 8, 2026

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

75.5%

High · next 30 days

Percentile: 99.5%
Model date: Oct 17, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Template

WordPress Elementor Lite 5.7.1 - Arbitrary Password ResetTemplate
http/cves/2023/CVE-2023-32243.yaml
Nuclei Templates
DetectionEvidence observed: Sep 26, 2026Revision: 008731b339bdRelated tool
Declared conditions
- network: http($.protocol_keys)
- verification: word($.matchers[*].type)

CVE-2023-32243Exploit
CVE-2023-32243 - Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation
CVE-2023-32243PoC
Exploit for CVE-2023-32243 - Unauthorized Account Takeover.

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.