UpHeron
All vulnerabilities

WordPress plugins

CVE-2020-26596

Elementor Pro: Improper Privilege Management

Severity
High 8.8
Published
6 Oct 2020
Added to UpHeron
5 Nov 2026
Fixed in
3.0.6
Also known as
WPV-5e4b85a91ba4
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Elementor Pro (WordPress plugin)WordPress plugins · wp-plugin:elementor-pro
  • Every version before 3.0.6

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-26596
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/elementor-pro/elementor-pro-305-authenticated-remote-code-execution-in-dynamic-ooo-widget