CVE-2023-35050

WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability

Missing Authorization vulnerability in Elementor Elementor Pro.This issue affects Elementor Pro: from n/a through 3.13.0.

We have discovered 168,715 live websites that are affected by CVE-2023-35050.

Run a Free Instant Scan



Affected Software

Product  Elementor Pro
Category Landing Page Builders
Vulnerable Domains168,715 live websites (13% of Elementor Pro install base)
Vulnerable Versions
  • from 0 through 3.13
Vulnerable Versions Count164 versions ( 61% of all versions)


Common Weakness Enumeration

CWE-862 Missing Authorization



Details

  • Published - Jun 19, 2024
  • Updated - Apr 28, 2026

Credits

  • Rafie Muhammad (Patchstack) (finder)

Website Distribution by Country

Number of websites using CVE-2023-35050
United States37,948 websites


Germany15,515 websites
Brazil9,379 websites
France8,345 websites
Russia7,188 websites
GB6,904 websites
Italy6,666 websites
Spain6,271 websites
Poland4,863 websites
Israel4,440 websites

Website Distribution by TLD

Number of websites using CVE-2023-35050
.com63,859 websites
.com.br8,798 websites
.de8,589 websites
.ru5,703 websites
.org5,389 websites
.it4,736 websites
.co.uk3,754 websites
.pl3,642 websites
.fr3,408 websites
.nl3,368 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-35050

Top websites that are affected by CVE-2023-35050. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**************.de Germany***
******.com United States*,***
**********.com United States*,***
*********.com United States*,***
**********.com United States*,***
***************.org United States*,***
**********************.de Germany**,***
************.com South Africa**,***
****.ru Russia**,***
********************.com United States**,***
See full domain list

FAQ

CVE-2023-35050 is Missing Authorization in Elementor Pro
A total of 168,715 websites have been identified as vulnerable to CVE-2023-35050, based on global website indexing conducted by WebTechSurvey.
The Elementor Pro is affected by the CVE-2023-35050 vulnerability.
Elementor Pro versions up to and including 3.13 are vulnerable to CVE-2023-35050.