Skip to content
OpenAdvisories

Vendor

Elementor

25 known vulnerabilities.

Products

Elementor Website Builder 15 Elementor Pro 4 Ally 2 Image Optimizer by Elementor 1 Elementor Website Builder (WordPress plugin) 1 Activity Log 1 Hello Elementor 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-47504 Public exploit

    WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability

    Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.

    Elementor Elementor Website Builder
  • Medium 4.7
    CVE-2022-29455 Public exploit EPSS 24%

    WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability

    DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.

    Elementor Elementor Website Builder (WordPress plugin) Web / CMS