Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2023-32243

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

CVSS 9.8 · CriticalBuzz score 32.5

Buzz score

Why this CVE is surfacing

Buzz score total 32.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 19.5 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
19.5
6 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
6 source links · newest first
  • 22nd May – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 22nd May, please download our Threat_Intelligence Bulletin TOP ATTACKS AND BREACHES PharMerica, a provider of pharmacy services across the U.S., disclosed a data breach impacting approximately 5.8 million of its patients. Money Message ransomware gang claimed the attack during April, and threatened to leak […]

    vendorresearch.checkpoint.comMay 22, 2023, 2:43 PM
  • Wordfence Intelligence Weekly WordPress Vulnerability Report (May 8, 2023 to May 14, 2023)Wordfence

    Last week, there were 139 vulnerabilities disclosed in 105 WordPress Plugins and 2 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 47 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with … Read More

    vendorwww.wordfence.comMay 18, 2023, 12:45 PM
  • PSA: Attackers Actively Exploiting Critical Vulnerability in Essential Addons for ElementorWordfence

    On May 11 2023, Essential Addons for Elementor, a WordPress plugin with over one million active installations, released a patch for a critical vulnerability that made it possible for any unauthenticated user to reset arbitrary user passwords, including user accounts with administrative-level access. This vulnerability was discovered and responsibly disclosed by security researcher Rafie Muhammed. … Read More

    vendorwww.wordfence.comMay 17, 2023, 4:33 PM
  • 15th May – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 15th May, please download our Threat_Intelligence Bulletin TOP ATTACKS AND BREACHES The Swedish-Swiss multinational automation company ABB has been a victim of a ransomware attack conducted by the Russian Black Basta ransomware group. The threat actors have attacked the company’s Windows Active Directory, affecting […]

    vendorresearch.checkpoint.comMay 15, 2023, 1:58 PM
  • 1 Million WordPress Sites Impacted by Exploited Plugin VulnerabilitySecurityWeek

    Exploitation of a critical vulnerability in the Essential Addons for Elementor WordPress plugin started immediately after a patch was released.

    newswww.securityweek.comMay 12, 2023, 8:45 AM
  • A flaw in the Essential ‘Addons for Elementor’ WordPress plugin poses 1M sites at risk of hackingSecurity Affairs

    Experts warn of an unauthenticated privilege escalation flaw in the popular Essential ‘Addons for Elementor’ WordPress plugin. Essential ‘Addons for Elementor’ WordPress plugin is a collection of 90+ creative elements and extensions Enhance that allow admins to enhance Elementor page building experience. The plugin has more than one million active installations. Researchers from PatchStack discovered that […]

    newssecurityaffairs.comMay 12, 2023, 5:16 AM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2026-12504

    Improper Authentication (CWE-287) in the PAM configuration in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a local att…

    CVSS 8.4 · High
    1 mention
  • CVE-2026-12877

    The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 does not sanitise and escape user supplied input before using it in a SQL query, allowing unau…

    CVSS 9.1 · Critical
    1 mention
  • CVE-2026-62825

    Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.

    CVSS 10.0 · Critical
    1 mention
  • CVE-2026-56191

    Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.

    CVSS 10.0 · Critical
    1 mention
  • CVE-2026-15981

    The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mo_saml_validate_si…

    CVSS 9.8 · Critical
    7 mentions
  • CVE-2026-10697

    Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.

    CVSS 7.5 · High
    1 mention