CVE-2026-57619: WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability
Published Jun 25, 2026
·Updated
Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions.
Affected Software
1 affected component
wordpress/elementor<=4.1.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Elementor Website Builder pluginto a version that resolves this vulnerability.Fixed in 4.1.4
Event History
Jun 25, 2026
CVE Published
via MITRE·01:12 PM
Data Sourced
via MITRE·01:12 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-57619?
CVE-2026-57619 has a medium severity score of 6.5.
2
What vulnerabilities are associated with CVE-2026-57619?
CVE-2026-57619 pertains to a Sensitive Data Exposure vulnerability in the Elementor Website Builder plugin versions <= 4.1.3.
3
How do I fix CVE-2026-57619?
To mitigate CVE-2026-57619, update the Elementor plugin to a version higher than 4.1.3.
4
What type of data is exposed in CVE-2026-57619?
CVE-2026-57619 exposes sensitive contributor data in Elementor Website Builder versions up to 4.1.3.
5
What are the potential impacts of CVE-2026-57619?
The potential impacts of CVE-2026-57619 include unauthorized access to sensitive contributor information.