CVE

CVE-2021-24175

9.8

CVSS

Description

The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including admin) by just providing the related username, as well as create accounts with arbitrary roles, such as admin. These issues can be exploited even if registration is disabled, and the Login widget is not active.

Attack Vector

Privileges Req.

User Interaction

the plus addons for elementor page builder

Updated Oct 24, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24175 Scanner

CVE-2021-24175 Scanner - Authentication Bypass vulnerability in The Plus Addons for Elementor

Used 3k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: the plus addons for elementor page builder

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →