Skip to content
OpenAdvisories

Vendor

Elementor

25 known vulnerabilities.

Products

Elementor Website Builder 15 Elementor Pro 4 Ally 2 Image Optimizer by Elementor 1 Elementor Website Builder (WordPress plugin) 1 Activity Log 1 Hello Elementor 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-62062 Public exploit

    WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1.

    Elementor Elementor Website Builder
  • Critical 9.0
    CVE-2026-32475 Public exploit

    WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

    Elementor Elementor Pro
  • Medium 6.5
    CVE-2023-47504 Public exploit

    WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability

    Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.

    Elementor Elementor Website Builder
  • Medium 4.7
    CVE-2022-29455 Public exploit EPSS 24%

    WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability

    DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.

    Elementor Elementor Website Builder (WordPress plugin) Web / CMS