Unknown Elementor Website Builder vulnerabilities

• elementor website builder, unknown elementor website builder +1 more Elementor < 4.3.5 - Contributor+ Stored XSS via SVG CDATA Sanitizer Bypass CVE-2026-81813 6.8 MediumOctober 21, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 4.3.5 - Author+ Stored XSS via SVG Upload CVE-2026-81812 6.4 MediumOctober 21, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 4.1.4 - Contributor+ Sensitive Information Disclosure via REST API CVE-2026-8825 4.9 MediumJuly 20, 2026
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.5.5 - Iframe Injection CVE-2022-4953 Public exploit 6.1 MediumAugust 14, 2023
• elementor website builder, unknown elementor website builder +1 more Elementor Website Builder < 3.12.2 - Admin+ SQLi CVE-2023-0329 EPSS 19.7% 7.2 HighMay 30, 2023
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.4.8 - DOM Cross-Site-Scripting CVE-2021-24891 Public exploit EPSS 28.9% 6.1 MediumNovember 23, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget CVE-2021-24206 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget CVE-2021-24205 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget CVE-2021-24204 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget CVE-2021-24203 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget CVE-2021-24202 5.4 MediumApril 5, 2021
• elementor website builder, unknown elementor website builder +1 more Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element CVE-2021-24201 5.4 MediumApril 5, 2021