Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

339,760

All time

Critical · Active

10,860

CVSS ≥ 9.0

New · 14 days

2,612

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 451–480 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-32157	high	7.5/10	WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability	Apr 4, 2025 1y ago
CVE-2025-32135	medium	5.9/10	WordPress Split Test For Elementor plugin <= 1.8.4 - Cross Site Scripting (XSS) vulnerability	Apr 4, 2025 1y ago
CVE-2025-1663	medium	6.4/10	Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting	Apr 3, 2025 1y ago
CVE-2025-31889	medium	6.5/10	WordPress Extensions for Elementor plugin <= 2.0.40 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31869	medium	6.5/10	WordPress Black Widgets For Elementor plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31857	medium	6.5/10	WordPress Directorist AddonsKit for Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31850	medium	6.5/10	WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31823	medium	6.5/10	WordPress WPoperation Elementor Addons plugin 1.1.9 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31813	medium	6.5/10	WordPress WPSHARE247 Elementor Addons plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31796	medium	5.4/10	WordPress ElementsCSS Addons for Elementor plugin <= 1.0.8.9 - Server Side Request Forgery (SSRF) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31771	medium	6.5/10	WordPress Team Members for Elementor Page Builder plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-31749	medium	6.5/10	WordPress HMH Footer Builder For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Apr 1, 2025 1y ago
CVE-2025-1512	medium	6.4/10	PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	Apr 1, 2025 1y ago
CVE-2024-12189	medium	6.4/10	WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	Apr 1, 2025 1y ago
CVE-2025-30926	medium	4.3/10	WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability	Apr 1, 2025 1y ago
CVE-2025-30911	critical	9.9/10	WordPress RomethemeKit For Elementor plugin <= 1.5.4 - Arbitrary Plugin Installation/Activation to RCE vulnerability	Apr 1, 2025 1y ago
CVE-2025-31567	medium	6.5/10	WordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability	Mar 31, 2025 1y ago
CVE-2025-31529	medium	4.3/10	WordPress Slider Path for Elementor plugin <= 3.0.0 - Broken Access Control vulnerability	Mar 31, 2025 1y ago
CVE-2025-30987	medium	6.5/10	WordPress JetBlocks For Elementor plugin <= 1.3.16 - Cross Site Scripting (XSS) vulnerability	Mar 31, 2025 1y ago
CVE-2024-11180	medium	6.4/10	ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 29, 2025 1y ago
CVE-2025-22646	medium	6.5/10	WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-22648	medium	6.5/10	WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-22671	medium	4.3/10	WordPress Disable Elementor Editor Translation plugin <= 1.0.2 - Broken Access Control vulnerability	Mar 27, 2025 1y ago
CVE-2025-30925	medium	6.5/10	WordPress The Pack Elementor addons plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30914	medium	4.4/10	WordPress Metform Elementor Contact Form Builder plugin <= 3.9.7 - Server Side Request Forgery (SSRF) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30863	medium	4.3/10	WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30845	high	7.5/10	WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability	Mar 27, 2025 1y ago
CVE-2025-30812	medium	6.5/10	WordPress SKT Addons for Elementor plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30800	medium	6.5/10	WordPress Gum Elementor Addon plugin <= 1.3.10 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2025 1y ago
CVE-2025-30766	medium	6.5/10	WordPress Happy Addons for Elementor plugin <= 3.16.2 - Cross Site Scripting (XSS) Vulnerability	Mar 27, 2025 1y ago