Skip to content

Elementor Website Builder vulnerabilities

elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import CVE-2025-8081 Public exploit 4.9 MediumAugust 12, 2025
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-3075 6.4 MediumJuly 29, 2025
elementor website builder WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability CVE-2024-54444 6.5 MediumFebruary 25, 2025
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13445 6.4 MediumFebruary 20, 2025
elementor website builder, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode CVE-2024-8494 4.3 MediumJanuary 30, 2025
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings CVE-2024-10453 6.4 MediumDecember 21, 2024
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-8236 6.4 MediumNovember 26, 2024
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function CVE-2024-6757 4.3 MediumOctober 15, 2024
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets CVE-2024-5416 5.4 MediumSeptember 11, 2024
elementor website builder WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability CVE-2024-37437 5.5 MediumJuly 9, 2024
elementor website builder WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability CVE-2023-33922 4.3 MediumJune 11, 2024
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-4619 6.4 MediumMay 21, 2024
elementor website builder WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability CVE-2024-24934 8.5 HighMay 17, 2024
elementor website builder, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-4107 6.4 MediumMay 9, 2024
elementor website builder WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability CVE-2023-47504 Public exploit 6.5 MediumApril 24, 2024
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget CVE-2024-2117 6.4 MediumApril 9, 2024
elementor website builder, https://elementor.com/ elementor website builder pro +1 more Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation CVE-2024-2120 5.4 MediumMarch 27, 2024
elementor pro, website builder, https://elementor.com/ elementor website builder pro +2 more Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag CVE-2024-2781 6.4 MediumMarch 27, 2024
elementor website builder, elementor.com elementor website builder +1 more WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability CVE-2023-48777 Public exploit 9.9 CriticalMarch 26, 2024
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt CVE-2024-0506 6.4 MediumFebruary 20, 2024
elementor website builder, elementor.com elementor +1 more WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-47505 EPSS 25.3% 6.5 MediumNovember 30, 2023
elementor website builder, unknown elementor website builder +1 more Elementor < 3.5.5 - Iframe Injection CVE-2022-4953 Public exploit 6.1 MediumAugust 14, 2023
elementor website builder, elemntor elementor website builder – more than just a page builder +1 more Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting CVE-2020-36703 6.4 MediumJune 7, 2023
elementor website builder, unknown elementor website builder +1 more Elementor Website Builder < 3.12.2 - Admin+ SQLi CVE-2023-0329 EPSS 19.7% 7.2 HighMay 30, 2023
elementor website builder, website builder (wordpress plugin) +1 more WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability CVE-2022-29455 Public exploit EPSS 23.7% 4.7 MediumJune 13, 2022
elementor website builder, elemntor elementor website builder +1 more Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution CVE-2022-1329 Public exploit EPSS 92.7% 8.8 HighApril 19, 2022
elementor website builder, unknown elementor website builder +1 more Elementor < 3.4.8 - DOM Cross-Site-Scripting CVE-2021-24891 Public exploit EPSS 28.9% 6.1 MediumNovember 23, 2021
elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget CVE-2021-24206 5.4 MediumApril 5, 2021
elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget CVE-2021-24205 5.4 MediumApril 5, 2021
elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget CVE-2021-24204 5.4 MediumApril 5, 2021
elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget CVE-2021-24203 5.4 MediumApril 5, 2021
elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget CVE-2021-24202 5.4 MediumApril 5, 2021
elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element CVE-2021-24201 5.4 MediumApril 5, 2021
elementor website builder The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG... CVE-2020-36171 6.1 MediumJanuary 6, 2021
elementor website builder An issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated... CVE-2020-15020 5.4 MediumAugust 31, 2020
elementor website builder Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode... CVE-2020-20634 6.5 MediumAugust 21, 2020
elementor website builder The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the... CVE-2020-8426 5.4 MediumJanuary 28, 2020
elementor website builder The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during... CVE-2020-7109 9.8 CriticalJanuary 22, 2020