Elementor vulnerabilities

Products

• Website Builder 38
• Website Builder 26
• Page Builder 8
• Pro 8
• Pro 4
• Ally 2

Newest

• elementor website builder, unknown elementor website builder +1 more Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass CVE-2026-81813 6.8 MediumOctober 21, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload CVE-2026-81812 6.4 MediumOctober 21, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-62062 Public exploit 8.8 HighSeptember 25, 2026
• elementor activity log WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-84759 7.1 HighSeptember 2, 2026
• elementor pro WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability CVE-2026-32475 Public exploit 9.0 CriticalAugust 19, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 4.1.4 - Contributor+ Sensitive Information Disclosure via REST API CVE-2026-8825 4.9 MediumJuly 20, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability CVE-2026-57619 6.5 MediumJune 25, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability CVE-2026-49782 5.4 MediumJune 2, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability CVE-2026-32445 2.7 LowMarch 13, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-32352 6.5 MediumMarch 13, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-50555 6.5 MediumFebruary 20, 2026
• elementor image optimizer by elementor WordPress Image Optimizer by Elementor plugin <= 1.7.1 - Broken Access Control vulnerability CVE-2026-25387 4.3 MediumFebruary 19, 2026
• elementor ally WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability CVE-2026-25386 5.3 MediumFebruary 19, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability CVE-2025-67588 4.3 MediumDecember 9, 2025
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import CVE-2025-8081 Public exploit 4.9 MediumAugust 12, 2025
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-3075 6.4 MediumJuly 29, 2025
• https://elementor.com/ elementor website builder pro, elementor page builder +1 more Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-3076 6.4 MediumJune 10, 2025
• elementor ally WordPress One Click Accessibility plugin <= 3.1.0 - Cross-Site Scripting (XSS) vulnerability CVE-2025-32640 5.9 MediumApril 9, 2025
• elementor site mailer, elemntor site mailer – smtp replacement, email api deliverability & email log +1 more Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting CVE-2025-1319 7.2 HighFebruary 28, 2025
• elementor website builder WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability CVE-2024-54444 6.5 MediumFebruary 25, 2025
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13445 6.4 MediumFebruary 20, 2025
• elementor website builder, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode CVE-2024-8494 4.3 MediumJanuary 30, 2025
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings CVE-2024-10453 6.4 MediumDecember 21, 2024
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-8236 6.4 MediumNovember 26, 2024
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function CVE-2024-6757 4.3 MediumOctober 15, 2024
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets CVE-2024-5416 5.4 MediumSeptember 11, 2024
• elementor pro WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-35656 7.1 HighJuly 22, 2024
• elementor website builder WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability CVE-2024-37437 5.5 MediumJuly 9, 2024
• elementor pro WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability CVE-2023-35050 5.4 MediumJune 19, 2024
• elementor website builder WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability CVE-2023-33922 4.3 MediumJune 11, 2024
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-4619 6.4 MediumMay 21, 2024
• elementor website builder WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability CVE-2024-24934 8.5 HighMay 17, 2024
• elementor website builder, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-4107 6.4 MediumMay 9, 2024
• elementor website builder WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability CVE-2023-47504 Public exploit 6.5 MediumApril 24, 2024
• bdthemes prime slider – addons for elementor, prime slider, elementor +2 more WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability CVE-2024-32681 4.3 MediumApril 22, 2024
• elementor hello elementor WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31289 4.3 MediumApril 12, 2024
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget CVE-2024-2117 6.4 MediumApril 9, 2024
• elementor website builder, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation CVE-2024-2120 5.4 MediumMarch 27, 2024
• elementor pro, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload CVE-2024-1521 6.4 MediumMarch 27, 2024
• elementor pro, website builder, https://elementor.com/ elementor website builder pro +2 more Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag CVE-2024-2781 6.4 MediumMarch 27, 2024
• elementor pro, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-2121 5.4 MediumMarch 27, 2024
• elementor pro, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting CVE-2024-1364 6.4 MediumMarch 27, 2024
• elementor website builder, elementor.com elementor website builder +1 more WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability CVE-2023-48777 Public exploit 9.9 CriticalMarch 26, 2024
• elementor pro WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability CVE-2024-23523 6.5 MediumMarch 16, 2024
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt CVE-2024-0506 6.4 MediumFebruary 20, 2024
• elementor website builder, elementor.com elementor +1 more WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47505 EPSS 25.3% 6.5 MediumNovember 30, 2023
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.5.5 - Iframe Injection CVE-2022-4953 Public exploit 6.1 MediumAugust 14, 2023
• elementor pro, https://elementor.com/ elementor website builder pro +1 more Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option CVE-2023-3124 Public exploit EPSS 22.7% 8.8 HighJune 7, 2023
• elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting CVE-2020-36703 6.4 MediumJune 7, 2023
• elementor website builder, unknown elementor website builder +1 more Elementor Website Builder < 3.12.2 - Admin+ SQLi CVE-2023-0329 EPSS 19.7% 7.2 HighMay 30, 2023
• Show olderLoading…