Elementor Website Builder

10 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-120850

  WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through 4.3.5.

  Elementor Elementor Website Builder
  Nov 7, 2026
• Medium 6.5
  CVE-2026-57619

  WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability

  Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions.

  Elementor Elementor Website Builder
  Jun 25, 2026
• Medium 5.4
  CVE-2026-49782

  WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability

  Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from n/a through 4.1.0.

  Elementor Elementor Website Builder
  Jun 2, 2026
• Medium 6.5
  CVE-2026-32352

  WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows DOM-Based XSS.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.

  Elementor Elementor Website Builder
  Mar 13, 2026
• Medium 6.5
  CVE-2024-50555

  WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through <= 3.29.0.

  Elementor Elementor Website Builder
  Feb 20, 2026
• Medium 4.3
  CVE-2025-67588

  WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability

  Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through <= 3.33.0.

  Elementor Elementor Website Builder
  Dec 9, 2025
• Medium 6.5
  CVE-2024-54444

  WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through <= 3.25.10.

  Elementor Elementor Website Builder
  Feb 25, 2025
• Medium 5.5
  CVE-2024-37437

  WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor.This issue affects Elementor Website Builder: from n/a through <= 3.22.1.

  Elementor Elementor Website Builder
  Jul 9, 2024
• Medium 4.3
  CVE-2023-33922

  WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability

  Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2.

  Elementor Elementor Website Builder
  Jun 11, 2024
• Medium 6.5
  CVE-2023-47504 Public exploit

  WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability

  Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.

  Elementor Elementor Website Builder
  Apr 24, 2024