Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

352,158

All time

Critical · Active

12,432

CVSS ≥ 9.0

New · 14 days

2,123

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 331–360 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-8481	medium	4.3/10	Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid <= 1.1.7 - Cross-Site Request Forgery	Sep 11, 2025 1y ago
CVE-2025-8445	medium	6.4/10	Countdown Timer for Elementor <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'countdown_label'	Sep 11, 2025 1y ago
CVE-2025-8388	medium	6.4/10	PowerPack Lite for Elementor <= 2.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Via 'cursor_url'	Sep 10, 2025 1y ago
CVE-2025-8564	medium	6.4/10	SKT Addons for Elementor <= 3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	Sep 6, 2025 1y ago
CVE-2025-8149	medium	6.4/10	aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget	Sep 6, 2025 1y ago
CVE-2025-8360	medium	6.4/10	LA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	Sep 6, 2025 1y ago
CVE-2025-58816	low	3.5/10	WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58796	medium	6.5/10	WordPress Elementor Element Condition Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability	Sep 5, 2025 1y ago
CVE-2025-58793	medium	6.5/10	WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability	Sep 5, 2025 1y ago
CVE-2025-8150	medium	6.4/10	Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets	Aug 29, 2025 1y ago
CVE-2025-8619	medium	6.4/10	OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL	Aug 29, 2025 1y ago
CVE-2025-53230	high	7.6/10	WordPress Page Manager for Elementor Plugin <= 2.0.5 - Broken Access Control Vulnerability	Aug 28, 2025 1y ago
CVE-2025-49387	critical	10.0/10	WordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability	Aug 28, 2025 1y ago
CVE-2025-48354	medium	6.5/10	WordPress Better Post & Filter Widgets for Elementor plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability	Aug 28, 2025 1y ago
CVE-2025-8603	medium	6.4/10	Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting	Aug 28, 2025 1y ago
CVE-2025-58208	medium	6.5/10	WordPress PDF for Elementor Forms + Drag And Drop Template Builder Plugin <= 6.2.0 - Cross Site Scripting (XSS) Vulnerability	Aug 27, 2025 1y ago
CVE-2025-58205	medium	6.5/10	WordPress ElementInvader Addons for Elementor Plugin <= 1.3.6 - Cross Site Scripting (XSS) Vulnerability	Aug 27, 2025 1y ago
CVE-2025-58195	medium	6.5/10	WordPress Xpro Elementor Addons Plugin <= 1.4.17 - Cross Site Scripting (XSS) Vulnerability	Aug 27, 2025 1y ago
CVE-2025-8208	medium	6.4/10	Spexo Addons for Elementor <= 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget	Aug 24, 2025 1y ago
CVE-2025-53983	medium	6.5/10	WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability	Aug 20, 2025 1y ago
CVE-2025-53988	medium	6.5/10	WordPress JetBlocks For Elementor <= 1.3.18 - Sensitive Data Exposure Vulnerability	Aug 20, 2025 1y ago
CVE-2025-7439	medium	6.4/10	Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link	Aug 16, 2025 1y ago
CVE-2025-7440	medium	6.4/10	Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Carousel button link	Aug 16, 2025 1y ago
CVE-2025-8451	medium	6.4/10	Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'	Aug 15, 2025 1y ago
CVE-2025-8867	medium	6.4/10	Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	Aug 15, 2025 1y ago
CVE-2025-54712	medium	4.3/10	WordPress Easy Elementor Addons Plugin <= 2.2.7 - Broken Access Control Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55712	medium	6.5/10	WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 6.3.13 - Broken Access Control Vulnerability	Aug 14, 2025 1y ago
CVE-2025-55714	medium	6.5/10	WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago
CVE-2024-37945	medium	6.5/10	WordPress WPBITS Addons For Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability	Aug 14, 2025 1y ago
CVE-2025-54704	medium	6.5/10	WordPress Easy Elementor Addons plugin <= 2.2.6 - Cross Site Scripting (XSS) Vulnerability	Aug 14, 2025 1y ago