Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

349,464

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,092

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10778	medium	4.3/10	BuddyPress Builder for Elementor – BuddyBuilder <= 1.7.4 - Authenticated (Contributor+) Post Disclosure	Nov 13, 2024 1y ago
CVE-2024-10323	medium	6.4/10	JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 12, 2024 1y ago
CVE-2024-10538	medium	6.4/10	Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison	Nov 12, 2024 1y ago
CVE-2024-52354	medium	6.5/10	WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-52356	medium	6.5/10	WordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-52358	medium	6.5/10	WordPress Responsive Addons for Elementor plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51571	medium	6.5/10	WordPress MasterBip para Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51575	medium	6.5/10	WordPress Extender All In One For Elementor plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51580	medium	6.5/10	WordPress Clever Addons for Elementor plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51581	medium	6.5/10	WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51584	medium	6.5/10	WordPress Marquee Elementor with Posts plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51587	medium	6.5/10	WordPress Definitive Addons for Elementor plugin <= 1.5.16 - Stored Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51588	medium	6.5/10	WordPress Super Addons for Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51590	medium	6.5/10	WordPress Hoo Addons for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51597	medium	6.5/10	WordPress ThemeShark Templates & Widgets for Elementor plugin <= 1.1.7 - Stored Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51629	medium	6.5/10	WordPress Header Footer Composer for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51662	medium	6.5/10	WordPress Black Widgets For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51674	medium	6.5/10	WordPress Sastra Essential Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51675	medium	6.5/10	WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10352	medium	4.3/10	Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template	Nov 9, 2024 1y ago
CVE-2024-51787	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10693	medium	4.3/10	SKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosure	Nov 9, 2024 1y ago
CVE-2024-8960	medium	6.4/10	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 9, 2024 1y ago
CVE-2024-10779	medium	5.3/10	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure	Nov 9, 2024 1y ago
CVE-2024-10325	medium	6.4/10	Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 8, 2024 1y ago
CVE-2024-8442	medium	6.4/10	Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget	Nov 7, 2024 1y ago
CVE-2024-10329	medium	4.3/10	Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure	Nov 5, 2024 1y ago
CVE-2024-10319	medium	4.3/10	140+ Widgets \| Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template	Nov 5, 2024 1y ago
CVE-2024-51680	medium	6.5/10	WordPress Cresta Addons for Elementor plugin <= 1.0.9 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51682	medium	6.5/10	WordPress HT Builder – WordPress Theme Builder for Elementor plugin <= 1.3.0 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago