elementor Vulnerability Advisory Catalog

Total 53 security vulnerabilities recorded for elementor software and firmware.

← Back to All Vendors
CVE-2020-7055 CRITICAL
Component: elementor_page_builder

An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to exec...

📅 2020-04-22
CVSS 9.9 Dossier →
CVE-2020-8426 MEDIUM
Component: website_builder

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited b...

📅 2020-01-28
CVSS 5.4 Dossier →
CVE-2020-7109 CRITICAL
Component: website_builder

The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template....

📅 2020-01-22
CVSS 9.8 Dossier →
Component: elementor_page_builder

The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS....

📅 2019-10-07
CVSS 6.1 Dossier →
Component: elementor_page_builder

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions....

📅 2019-09-10
CVSS 8.8 Dossier →
Page 3 of 3 (53 Total Records)