Skip to content
OpenAdvisories

Vendor

elemntor

25 known vulnerabilities.

Products

Elementor Website Builder – more than just a page builder 17 Ally – Web Accessibility & Usability 2 Elementor Website Builder 1 Activity Log – Monitor & Record User Changes 1 Hello Plus 1 Temporary Login 1 Site Mailer – SMTP Replacement, Email API Deliverability & Email Log 1 Image Optimizer – Compress Images and Convert to WebP or AVIF 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2025-8081 Public exploit

    Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import

    The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the Import_Images::import() function due to insufficient controls on the filename specified. This makes it possible for authenticated atta…

    elemntor Elementor Website Builder – more than just a page builder Web / CMS