CVE-2023-47827 - CVE House

Status published Medium CVE-2023-47827

WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control

6.5 CVSS

Vulnerability Description

Incorrect Authorization vulnerability in NicheAddons Events Addon for Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Events Addon for Elementor: from n/a through 2.1.3.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-47827

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Abdi Pranata (Patchstack Alliance)

References

https://patchstack.com/database/vulnerability/events-addon-for-elementor/wordpress-events-addon-for-elementor-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve

More from NicheAddons

View All →

CVE-2023-47826

WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability

Medium 6.5

Affected Vendor

NicheAddons

View all reports →

Affected Software

Events Addon for Elementor

Vulnerable Versions:

Unknown

Timeline

Official Publish: November 30th, 2023

Last Modified: April 28th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-863

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1078 Valid Accounts

Persistence

T1548 Abuse Elevation Control Mechanism

Privilege Escalation

T1021 Remote Services

Lateral Movement

T1098 Account Manipulation

Defense Evasion