elementor Vulnerability Advisory Catalog

Total 53 security vulnerabilities recorded for elementor software and firmware.

← Back to All Vendors
CVE-2025-8081 MEDIUM
Component: website_builder

The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the Import_Images::import() f...

๐Ÿ“… 2025-08-12
CVSS 4.9 Dossier →
CVE-2025-3075 MEDIUM
Component: website_builder

The Elementor Website Builder โ€“ More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'elem...

๐Ÿ“… 2025-07-29
CVSS 6.4 Dossier →
CVE-2025-3076 MEDIUM
Component: elementor_page_builder

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the โ€˜button_textโ€™ parameter in all versions up...

๐Ÿ“… 2025-06-10
CVSS 6.4 Dossier →
Component: site_mailer

The Site Mailer โ€“ SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all vers...

๐Ÿ“… 2025-02-28
CVSS 7.2 Dossier →
Component: website_builder

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor al...

๐Ÿ“… 2025-02-25
CVSS 6.5 Dossier →
Component: website_builder

The Elementor Website Builder โ€“ More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the border, margin...

๐Ÿ“… 2025-02-20
CVSS 6.4 Dossier →
CVE-2024-8494 MEDIUM
Component: website_builder

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.25.10 v...

๐Ÿ“… 2025-01-30
CVSS 4.3 Dossier →
Component: website_builder

The Elementor Website Builder โ€“ More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typog...

๐Ÿ“… 2024-12-21
CVSS 6.4 Dossier →
CVE-2024-8236 MEDIUM
Component: website_builder

The Elementor Website Builder โ€“ More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the โ€˜urlโ€™ paramete...

๐Ÿ“… 2024-11-26
CVSS 6.4 Dossier →
CVE-2024-6757 MEDIUM
Component: website_builder

The Elementor Website Builder โ€“ More than Just a Page Builder plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, ...

๐Ÿ“… 2024-10-15
CVSS 4.3 Dossier →
CVE-2024-5416 MEDIUM
Component: website_builder

The Elementor Website Builder โ€“ More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter ...

๐Ÿ“… 2024-09-11
CVSS 5.4 Dossier →
Component: elementor_pro

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Elementor Elementor Pro allows Reflected ...

๐Ÿ“… 2024-07-22
CVSS 7.1 Dossier →
Component: website_builder

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor.Th...

๐Ÿ“… 2024-07-09
CVSS 5.5 Dossier →
Component: website_builder

Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2....

๐Ÿ“… 2024-06-11
CVSS 4.3 Dossier →
CVE-2024-4619 MEDIUM
Component: website_builder

The Elementor Website Builder โ€“ More than Just a Page Builder plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the โ€˜hov...

๐Ÿ“… 2024-05-21
CVSS 6.4 Dossier →
Component: website_builder

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Elementor Elementor Website Builder allows Manipulatin...

๐Ÿ“… 2024-05-17
CVSS 8.5 Dossier →
CVE-2024-4107 MEDIUM
Component: website_builder

The Elementor Website Builder โ€“ More than Just a Page Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several pa...

๐Ÿ“… 2024-05-14
CVSS 6.4 Dossier →
Component: website_builder

Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issu...

๐Ÿ“… 2024-04-24
CVSS 6.5 Dossier →
CVE-2024-2117 MEDIUM
Component: website_builder

The Elementor Website Builder โ€“ More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Path ...

๐Ÿ“… 2024-04-09
CVSS 6.4 Dossier →
CVE-2024-2781 MEDIUM
Component: elementor_pro

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the video_html_tag attribute in all versions u...

๐Ÿ“… 2024-03-27
CVSS 6.4 Dossier →
CVE-2024-2121 MEDIUM
Component: elementor_pro

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Carousel widget in all vers...

๐Ÿ“… 2024-03-27
CVSS 5.4 Dossier →
CVE-2024-2120 MEDIUM
Component: website_builder

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Navigation widget in all ver...

๐Ÿ“… 2024-03-27
CVSS 5.4 Dossier →
CVE-2024-1521 MEDIUM
Component: elementor_pro

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an SVGZ file uploaded via the Form widget in a...

๐Ÿ“… 2024-03-27
CVSS 6.4 Dossier →
CVE-2024-1364 MEDIUM
Component: elementor_pro

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget's custom_id in all versions up to, and ...

๐Ÿ“… 2024-03-27
CVSS 6.4 Dossier →
Page 1 of 3 (53 Total Records)