Restrict for Elementor

Restrict for Elementor has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).

The one issue recorded for Restrict for Elementor has a vendor fix available, so running the current release closes it.

All of these findings were reported by Francesco Carlucci. Restrict for Elementor is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Restrict for Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2024-0910

Restrict for Elementor <= 1.0.7 - Protection Mechanism Bypass

Read the full analysis

Vulnerability Records

1 records
Restrict for Elementor banner
Latestv1.2.0

Restrict for Elementor

Restrict

Author

Restrict

4.0(9)
80/100
Last Updated
2026-07-24 (2mo ago)
Active Installs
900+
Downloads
16,648
Requires WP
6.5+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2021-07-01 (5y ago)

The Restrict for Elementor makes it easy for you to control and protect access to your Elementor-powered website. You can restrict, show and hide widgets, sections and columns to: Logged in users and guests Users with a specific role (administrator, editor, author, subscriber, etc) Users with a specific meta key and value Users with a specific capability Author of a post / page Visitors arriving with a specific URL parameter (i.e. ?src=newsletter) – great for landing page personalization Visitors arriving from a specific website (referrer) Visitors with a specific cookie Visitor’s country or continent – integration with Geolocation IP Detection Premium version integrations and available criteria for content restrictions and other features Alternative Content – display Elementor template or HTML / formatted text in place of restricted section, column or a widget White Label – by adding just one line to your wp-config.php like this define(&#8216;RSC_EL_PLUGIN_TITLE’, &#8216;My Restriction Plugin’); the whole plugin will become white labeled and ready for your clients. WooCommerce users – who made any purchase WooCommerce users – who purchased a specific product WooCommerce users – who purchased a specific product variation Restrict for Elementor also integrates with WooCommerce Subscription addon which allows you to show / hide content for clients with an active subscription. Easy Digital Downloads users – who purchased any Easy Digital Downloads product Easy Digital Downloads users – who purchased a specific Easy Digital Downloads product Tickera users – who purchased any ticket Tickera users – who purchased a specific ticket type Tickera users – who purchased a ticket for a specific event Venuera users – who purchased any ticket Venuera users – who purchased a specific ticket type Venuera users – who purchased a ticket for a specific event

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C