Skip to contentElementor vulnerabilities
Newest
- elementor website builder, website builder (wordpress plugin) +1 moreWordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerabilityCVE-2022-29455Public exploitEPSS 23.7%4.7 Medium
- elementor website builder, elemntor elementor website builder +1 moreElementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code ExecutionCVE-2022-1329Public exploitEPSS 92.7%8.8 High
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.4.8 - DOM Cross-Site-ScriptingCVE-2021-24891Public exploitEPSS 28.9%6.1 Medium
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box WidgetCVE-2021-242065.4 Medium
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box WidgetCVE-2021-242055.4 Medium
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion WidgetCVE-2021-242045.4 Medium
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider WidgetCVE-2021-242035.4 Medium
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading WidgetCVE-2021-242025.4 Medium
- elementor website builder, unknown elementor website builder +1 moreElementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column ElementCVE-2021-242015.4 Medium
- elementor website builderThe Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG...CVE-2020-361716.1 Medium
- elementor proThe Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote...CVE-2020-265968.8 High
- elementor page builderA stored XSS vulnerability exists in the Custom Link Attributes control Affect function in...CVE-2020-204065.4 Medium
- elementor website builderAn issue was discovered in the Elementor plugin through 2.9.13 for WordPress. An authenticated...CVE-2020-150205.4 Medium
- elementor website builderElementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode...CVE-2020-206346.5 Medium
- elementor page builderThe Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS...CVE-2020-138655.4 Medium
- elementor page builderThe Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS...CVE-2020-138645.4 Medium
- elementor page builderAn issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in...CVE-2020-131269.9 Critical
- elementor page builderAn issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor...CVE-2020-70559.9 Critical
- elementor website builderThe Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the...CVE-2020-84265.4 Medium
- elementor website builderThe Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during...CVE-2020-71099.8 Critical
- elementor page builderThe elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2...CVE-2018-183796.1 Medium
- elementor page builderThe elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.CVE-2017-185968.8 High