Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

339,995

All time

Critical · Active

10,875

CVSS ≥ 9.0

New · 14 days

2,617

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 631–660 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10777	medium	4.3/10	AnyWhere Elementor <= 1.2.11 - Authenticated (Contributor+) Post Disclosure	Dec 5, 2024 1y ago
CVE-2024-8962	medium	6.4/10	WPBITS Addons For Elementor Page Builder <= 1.5.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Dec 4, 2024 1y ago
CVE-2024-10787	medium	4.3/10	LA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post Disclosure	Dec 4, 2024 1y ago
CVE-2024-10663	medium	4.3/10	Eleblog – Elementor Blog And Magazine Addons <= 1.8 - Missing Authorization to Authenticated (Subscriber+) Deactivation Submission	Dec 4, 2024 1y ago
CVE-2024-12062	medium	4.3/10	Charity Addon for Elementor <= 1.3.3 - Authenticated (Contributor+) Post Disclosure	Dec 3, 2024 1y ago
CVE-2024-9058	medium	6.4/10	Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget	Dec 3, 2024 1y ago
CVE-2024-52486	medium	6.5/10	WordPress Elementor Portfolio Builder plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Dec 2, 2024 1y ago
CVE-2024-53743	medium	6.5/10	WordPress Countdown Timer for Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Dec 1, 2024 1y ago
CVE-2024-53744	medium	6.5/10	WordPress Elementor Image Gallery plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability	Dec 1, 2024 1y ago
CVE-2024-53746	medium	6.5/10	WordPress Elementor Button Plus plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability	Dec 1, 2024 1y ago
CVE-2024-53749	medium	6.5/10	WordPress Post Carousel Slider for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Dec 1, 2024 1y ago
CVE-2024-53763	medium	6.5/10	WordPress Best Addons for Elementor plugin <=1.0.5 - Stored Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53764	medium	6.5/10	WordPress Softtemplates For Elementor plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53766	medium	6.5/10	WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53774	medium	6.5/10	WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53786	medium	6.5/10	WordPress Cowidgets – Elementor Addons plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53739	high	8.1/10	WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability	Nov 30, 2024 1y ago
CVE-2024-10980	—	—	Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS	Nov 29, 2024 1y ago
CVE-2024-52496	high	7.5/10	WordPress Absolute Addons For Elementor plugin <= 1.0.14 - Local File Inclusion vulnerability	Nov 28, 2024 1y ago
CVE-2024-52499	high	7.5/10	WordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability	Nov 28, 2024 1y ago
CVE-2024-10780	medium	4.3/10	Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure	Nov 28, 2024 1y ago
CVE-2024-10670	medium	4.3/10	Primary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure	Nov 28, 2024 1y ago
CVE-2024-10798	medium	4.3/10	Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure	Nov 28, 2024 1y ago
CVE-2024-11203	medium	6.4/10	EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'	Nov 28, 2024 1y ago
CVE-2024-10493	—	—	Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS	Nov 28, 2024 1y ago
CVE-2024-8236	medium	6.4/10	Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	Nov 26, 2024 1y ago
CVE-2024-8899	medium	4.3/10	Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template	Nov 26, 2024 1y ago
CVE-2024-10308	medium	6.4/10	Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget	Nov 26, 2024 1y ago
CVE-2024-11034	high	7.3/10	Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form	Nov 23, 2024 1y ago
CVE-2024-10873	high	8.8/10	LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion	Nov 23, 2024 1y ago