Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

340,098

All time

Critical · Active

10,904

CVSS ≥ 9.0

New · 14 days

2,617

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10319	medium	4.3/10	140+ Widgets \| Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template	Nov 5, 2024 1y ago
CVE-2024-51680	medium	6.5/10	WordPress Cresta Addons for Elementor plugin <= 1.0.9 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51682	medium	6.5/10	WordPress HT Builder – WordPress Theme Builder for Elementor plugin <= 1.3.0 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51683	medium	6.5/10	WordPress Custom post type templates for Elementor plugin <= 1.10.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51685	medium	5.9/10	WordPress Accordion title for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51665	medium	4.9/10	WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability	Nov 4, 2024 1y ago
CVE-2024-10310	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget	Nov 2, 2024 1y ago
CVE-2024-48045	medium	4.3/10	WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37269	medium	5.3/10	WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43293	medium	4.3/10	WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43932	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47361	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-9388	medium	6.4/10	Black Widgets For Elementor <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 30, 2024 1y ago
CVE-2024-49654	high	7.1/10	WordPress Extra Privacy for Elementor plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-49665	medium	6.5/10	WordPress Web Bricks Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-49667	medium	6.5/10	WordPress Local Business Addons For Elementor plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-10360	medium	4.3/10	Move Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Oct 29, 2024 1y ago
CVE-2024-10266	medium	6.4/10	Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget	Oct 29, 2024 1y ago
CVE-2024-49679	medium	5.9/10	WordPress WPKoi Templates for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-9376	medium	6.4/10	Kata Plus – Addons for Elementor – Widgets, Extensions and Templates <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 29, 2024 1y ago
CVE-2024-10312	medium	4.3/10	Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Oct 29, 2024 1y ago
CVE-2024-50453	high	7.5/10	WordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerability	Oct 28, 2024 1y ago
CVE-2024-50433	medium	6.5/10	WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50447	medium	6.5/10	WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.19 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50449	medium	6.5/10	WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50442	medium	6.5/10	WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability	Oct 28, 2024 1y ago
CVE-2024-10357	medium	4.3/10	Clever Addons for Elementor <= 2.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Oct 26, 2024 1y ago
CVE-2024-10091	medium	6.4/10	ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget	Oct 26, 2024 1y ago
CVE-2024-49693	medium	6.5/10	WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Oct 24, 2024 1y ago
CVE-2024-49702	medium	6.5/10	WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Oct 24, 2024 1y ago