Medium severity6.5NVD Advisory· Published Aug 21, 2020· Updated Jun 17, 2026

CVE-2020-20634

Description

Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable all security plugins on the blog.

Affected products

Elementor/Website Builder
cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*
Range: <=2.9.5
WordPress/Elementor plugindescription
WordPress/Elementorllm-fuzzy
Range: <=2.9.5
Package: https://wordpress.org/plugins/elementor

Patches

Vulnerability mechanics

References

blog.nintechnet.com/wordpress-elementor-plugin-fixed-safe-mode-privilege-escalation-vulnerability/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000