Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

339,760

All time

Critical · Active

10,860

CVSS ≥ 9.0

New · 14 days

2,618

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 421–450 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-24752	high	7.1/10	WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerability	Apr 17, 2025 1y ago
CVE-2025-39588	critical	9.8/10	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability	Apr 17, 2025 1y ago
CVE-2025-39543	medium	6.5/10	WordPress Royal Elementor Addons plugin <= 1.3.977 - Cross Site Scripting (XSS) vulnerability	Apr 16, 2025 1y ago
CVE-2025-39546	medium	4.3/10	WordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerability	Apr 16, 2025 1y ago
CVE-2025-39589	medium	4.3/10	WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability	Apr 16, 2025 1y ago
CVE-2025-39590	medium	6.5/10	WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) Vulnerability	Apr 16, 2025 1y ago
CVE-2025-26990	medium	4.4/10	WordPress Royal Elementor Addons plugin <= 1.7.1006 - Server Side Request Forgery (SSRF) vulnerability	Apr 15, 2025 1y ago
CVE-2025-26745	medium	6.5/10	WordPress RS Elements Elementor Addon plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability	Apr 15, 2025 1y ago
CVE-2025-2225	medium	6.4/10	Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'rael_title_tag'	Apr 15, 2025 1y ago
CVE-2025-1456	medium	6.4/10	Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting	Apr 12, 2025 1y ago
CVE-2025-1455	medium	6.4/10	Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting	Apr 12, 2025 1y ago
CVE-2025-32672	high	8.1/10	WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability	Apr 11, 2025 1y ago
CVE-2025-32260	medium	5.3/10	WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability	Apr 10, 2025 1y ago
CVE-2025-32216	medium	6.4/10	WordPress Spider Elements – Addons for Elementor plugin <= 1.6.6 - Broken Access Control vulnerability	Apr 10, 2025 1y ago
CVE-2025-32158	high	7.5/10	WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability	Apr 10, 2025 1y ago
CVE-2025-32641	critical	9.6/10	WordPress Anant Addons for Elementor plugin <= 1.1.8 - CSRF to Arbitrary Plugin Installation vulnerability	Apr 9, 2025 1y ago
CVE-2025-32269	medium	4.3/10	WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms Plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability	Apr 4, 2025 1y ago
CVE-2025-32264	medium	4.3/10	WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32204	high	7.6/10	WordPress Split Test For Elementor Plugin <= 1.8.3 - SQL Injection vulnerability	Apr 4, 2025 1y ago
CVE-2025-32197	medium	6.5/10	WordPress Piotnet Addons For Elementor plugin <= 2.4.36 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32196	medium	6.5/10	WordPress News Kit Elementor Addons plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32194	medium	6.5/10	WordPress LA-Studio Element Kit for Elementor plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32192	medium	6.5/10	WordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32191	medium	6.5/10	WordPress News Element Elementor Blog Magazine plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32190	medium	6.5/10	WordPress Musician's Pack For Elementor plugin <= 1.8.7 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32189	medium	6.5/10	WordPress BWD Elementor Addons plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32186	medium	6.5/10	WordPress Turbo Addons for Elementor plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32184	medium	6.5/10	WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32182	medium	6.5/10	WordPress Spider Elements – Addons for Elementor plugin <= 1.6.5 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-32163	medium	6.5/10	WordPress Xpro Elementor Addons plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago