Skip to contentElemntor Elementor Website Builder vulnerabilities
- elemntor elementor website builder – more than just a page builderElementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersCVE-2026-119054.3 Medium
- elemntor elementor website builder – more than just a page builderElementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST APICVE-2026-61276.4 Medium
- elemntor elementor website builder – more than just a page builderElementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST APICVE-2025-147326.4 Medium
- elemntor elementor website builder – more than just a page builderElementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor TemplateCVE-2026-12064.3 Medium
- elemntor elementor website builder – more than just a page builderElementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text PathCVE-2025-112206.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image ImportCVE-2025-8081Public exploit4.9 Medium
- elemntor elementor website builder – more than just a page builderElementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path WidgetCVE-2025-45666.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-30756.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-134456.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography SettingsCVE-2024-104536.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-82366.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt FunctionCVE-2024-67574.3 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple WidgetsCVE-2024-54165.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2024-46196.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path WidgetCVE-2024-21176.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_altCVE-2024-05066.4 Medium
- elementor website builder, elemntor elementor website builder – more than just a page builder +1 moreElementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site ScriptingCVE-2020-367036.4 Medium
- elementor website builder, elemntor elementor website builder +1 moreElementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code ExecutionCVE-2022-1329Public exploitEPSS 92.7%8.8 High