Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

355,733

All time

Critical · Active

12,692

CVSS ≥ 9.0

New · 14 days

2,180

Newly disclosed

Feed last synced

47 mins ago

Data freshness

Showing 691–720 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-53766	medium	6.5/10	WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53774	medium	6.5/10	WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53786	medium	6.5/10	WordPress Cowidgets – Elementor Addons plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 30, 2024 1y ago
CVE-2024-53739	high	8.1/10	WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability	Nov 30, 2024 1y ago
CVE-2024-10980	—	—	Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS	Nov 29, 2024 1y ago
CVE-2024-52496	high	7.5/10	WordPress Absolute Addons For Elementor plugin <= 1.0.14 - Local File Inclusion vulnerability	Nov 28, 2024 1y ago
CVE-2024-52499	high	7.5/10	WordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability	Nov 28, 2024 1y ago
CVE-2024-10780	medium	4.3/10	Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure	Nov 28, 2024 1y ago
CVE-2024-10670	medium	4.3/10	Primary Addon for Elementor <= 1.6.2 - Authenticated (Contributor+) Post Disclosure	Nov 28, 2024 1y ago
CVE-2024-10798	medium	4.3/10	Royal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post Disclosure	Nov 28, 2024 1y ago
CVE-2024-11203	medium	6.4/10	EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'	Nov 28, 2024 1y ago
CVE-2024-10493	—	—	Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS	Nov 28, 2024 1y ago
CVE-2024-8236	medium	6.4/10	Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	Nov 26, 2024 1y ago
CVE-2024-8899	medium	4.3/10	Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template	Nov 26, 2024 1y ago
CVE-2024-10308	medium	6.4/10	Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget	Nov 26, 2024 1y ago
CVE-2024-11034	high	7.3/10	Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form	Nov 23, 2024 1y ago
CVE-2024-10873	high	8.8/10	LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion	Nov 23, 2024 1y ago
CVE-2024-10868	medium	4.3/10	Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure	Nov 23, 2024 1y ago
CVE-2024-11601	high	8.1/10	Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.1 - Cross-Site Request Forgery to Limited Arbitrary Options Update	Nov 22, 2024 1y ago
CVE-2024-11104	high	8.1/10	Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs) <= 2.6.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update	Nov 22, 2024 1y ago
CVE-2024-9542	medium	4.3/10	Sky Addons for Elementor <= 2.6.1 - Authenticated (Contributor+) Sensitive Information Exposure via Content Switcher Widget Elementor Template	Nov 21, 2024 1y ago
CVE-2024-10316	medium	4.3/10	Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Nov 21, 2024 1y ago
CVE-2024-10782	medium	4.3/10	Theme Builder For Elementor <= 1.2.2 - Authenticated (Contributor+) Post Disclosure	Nov 21, 2024 1y ago
CVE-2024-10696	medium	4.3/10	UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) <= 1.1.8 - Insecure Direct Object Reference to Sensitive Information Exposure via UA_Template Shortcode	Nov 21, 2024 1y ago
CVE-2024-52471	high	7.1/10	WordPress Extensions for Elementor plugin <= 2.0.37 - Reflected Cross Site Scripting (XSS) vulnerability	Nov 20, 2024 1y ago
CVE-2024-10365	medium	4.3/10	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.0.3 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Nov 20, 2024 1y ago
CVE-2024-50521	medium	6.5/10	WordPress Alley Elementor Widget plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-50543	medium	6.5/10	WordPress amazing neo icon font for elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-50542	medium	6.5/10	WordPress RLM Elementor Widgets Pack plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-50553	medium	6.5/10	WordPress Classy Addons for Elementor plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago