Elementor Website Builder vulnerabilities

• elementor website builder, unknown elementor website builder +1 more Elementor < 4.3.6 - Contributor+ Stored XSS via Element ID CVE-2026-104718 6.8 MediumNovember 11, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-120850 6.5 MediumNovember 7, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-109884 7.1 HighNovember 6, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-109883 7.1 HighNovember 6, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass CVE-2026-81813 6.8 MediumOctober 21, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload CVE-2026-81812 6.4 MediumOctober 21, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-62062 Public exploit 8.8 HighSeptember 25, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 4.1.4 - Contributor+ Sensitive Information Disclosure via REST API CVE-2026-8825 4.9 MediumJuly 20, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability CVE-2026-57619 6.5 MediumJune 25, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability CVE-2026-49782 5.4 MediumJune 2, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability CVE-2026-32445 2.7 LowMarch 13, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-32352 6.5 MediumMarch 13, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-50555 6.5 MediumFebruary 20, 2026
• elementor website builder WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability CVE-2025-67588 4.3 MediumDecember 9, 2025
• elementor website builder WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability CVE-2024-54444 6.5 MediumFebruary 25, 2025
• elementor website builder WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability CVE-2024-37437 5.5 MediumJuly 9, 2024
• elementor website builder WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability CVE-2023-33922 4.3 MediumJune 11, 2024
• elementor website builder WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability CVE-2024-24934 8.5 HighMay 17, 2024
• elementor website builder WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability CVE-2023-47504 Public exploit 6.5 MediumApril 24, 2024
• elementor website builder, elementor.com elementor website builder +1 more WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability CVE-2023-48777 Public exploit 9.9 CriticalMarch 26, 2024
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.5.5 - Iframe Injection CVE-2022-4953 Public exploit 6.1 MediumAugust 14, 2023
• elementor website builder, unknown elementor website builder +1 more Elementor Website Builder < 3.12.2 - Admin+ SQLi CVE-2023-0329 EPSS 19.7% 7.2 HighMay 30, 2023
• elementor website builder, website builder (wordpress plugin) +1 more WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability CVE-2022-29455 Public exploit EPSS 23.7% 4.7 MediumJune 13, 2022
• elementor website builder, elemntor elementor website builder +1 more Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution CVE-2022-1329 Public exploit EPSS 92.7% 8.8 HighApril 19, 2022
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.4.8 - DOM Cross-Site-Scripting CVE-2021-24891 Public exploit EPSS 28.9% 6.1 MediumNovember 23, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget CVE-2021-24206 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget CVE-2021-24205 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget CVE-2021-24204 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget CVE-2021-24203 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget CVE-2021-24202 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element CVE-2021-24201 5.4 MediumApril 5, 2021