Restrict for Elementor
Restrict for Elementor has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Restrict for Elementor has a vendor fix available, so running the current release closes it.
All of these findings were reported by Francesco Carlucci. Restrict for Elementor is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-0910Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass
Read the full analysisVulnerability Records

Restrict for Elementor
Author
Restrict
The Restrict for Elementor makes it easy for you to control and protect access to your Elementor-powered website. You can restrict, show and hide widgets, sections and columns to: Logged in users and guests Users with a specific role (administrator, editor, author, subscriber, etc) Users with a specific meta key and value Users with a specific capability Author of a post / page Visitors arriving with a specific URL parameter (i.e. ?src=newsletter) – great for landing page personalization Visitors arriving from a specific website (referrer) Visitors with a specific cookie Visitor’s country or continent – integration with Geolocation IP Detection Premium version integrations and available criteria for content restrictions and other features Alternative Content – display Elementor template or HTML / formatted text in place of restricted section, column or a widget White Label – by adding just one line to your wp-config.php like this define(‘RSC_EL_PLUGIN_TITLE’, ‘My Restriction Plugin’); the whole plugin will become white labeled and ready for your clients. WooCommerce users – who made any purchase WooCommerce users – who purchased a specific product WooCommerce users – who purchased a specific product variation Restrict for Elementor also integrates with WooCommerce Subscription addon which allows you to show / hide content for clients with an active subscription. Easy Digital Downloads users – who purchased any Easy Digital Downloads product Easy Digital Downloads users – who purchased a specific Easy Digital Downloads product Tickera users – who purchased any ticket Tickera users – who purchased a specific ticket type Tickera users – who purchased a ticket for a specific event Venuera users – who purchased any ticket Venuera users – who purchased a specific ticket type Venuera users – who purchased a ticket for a specific event
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C