Skip to content
Elementor Pro vulnerabilities
-
elementor pro
WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-35656
7.1 High
-
elementor pro
WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability
CVE-2023-35050
5.4 Medium
-
elementor pro, https://elementor.com/ elementor website builder pro +1 more
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload
CVE-2024-1521
6.4 Medium
-
elementor pro, website builder, https://elementor.com/ elementor website builder pro +2 more
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag
CVE-2024-2781
6.4 Medium
-
elementor pro, https://elementor.com/ elementor website builder pro +1 more
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2121
5.4 Medium
-
elementor pro, https://elementor.com/ elementor website builder pro +1 more
Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1364
6.4 Medium
-
elementor pro, https://elementor.com/ elementor website builder pro +1 more
Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
CVE-2023-3124
Public exploit
EPSS 22.7%
8.8 High
-
elementor pro
The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote...
CVE-2020-26596
8.8 High