A vulnerability marked as critical has been reported in Elementor Website Builder Plugin up to 4.1.0 on WordPress. The affected element is an unknown function. This manipulation causes missing authorization. This vulnerability is registered as CVE-2026-49782 . Remote exploitation of the attack is possible. No exploit is available.