Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

355,733

All time

Critical · Active

12,692

CVSS ≥ 9.0

New · 14 days

2,180

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-51812	medium	6.5/10	WordPress Pro Addons For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51813	medium	6.5/10	WordPress Anant Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51841	medium	6.5/10	WordPress File Select Control For Elementor plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51851	medium	6.5/10	WordPress best bootstrap widgets for elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51852	medium	6.5/10	WordPress Dynamic Post Grid Elementor Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51856	medium	6.5/10	WordPress Moose Elementor Kit plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51870	medium	6.5/10	WordPress Ultimate Flipbox Addon for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51893	medium	6.5/10	WordPress Postify: Post Layout For Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51894	medium	6.5/10	WordPress Topbar ID for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51927	medium	6.5/10	WordPress Rig Elements For Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-51938	medium	6.5/10	WordPress Charity Addon for Elementor plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	Nov 19, 2024 1y ago
CVE-2024-52425	medium	6.5/10	WordPress Drozd – Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 18, 2024 1y ago
CVE-2024-8979	high	8.0/10	Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Author+) Sensitive Information Exposure to Privilege Escalation	Nov 15, 2024 1y ago
CVE-2024-8978	medium	5.7/10	Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.9 - Authenticated (Contributor+) Sensitive Information Exposure	Nov 15, 2024 1y ago
CVE-2024-8961	medium	6.4/10	Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	Nov 15, 2024 1y ago
CVE-2024-10582	medium	4.3/10	Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import	Nov 15, 2024 1y ago
CVE-2024-10897	medium	4.3/10	Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation	Nov 15, 2024 1y ago
CVE-2024-9059	medium	6.4/10	Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget	Nov 13, 2024 1y ago
CVE-2024-10794	medium	4.3/10	Boostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure	Nov 13, 2024 1y ago
CVE-2024-10850	medium	6.1/10	Razorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site Scripting	Nov 13, 2024 1y ago
CVE-2024-10778	medium	4.3/10	BuddyPress Builder for Elementor – BuddyBuilder <= 1.7.4 - Authenticated (Contributor+) Post Disclosure	Nov 13, 2024 1y ago
CVE-2024-10323	medium	6.4/10	JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 12, 2024 1y ago
CVE-2024-10538	medium	6.4/10	Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison	Nov 12, 2024 1y ago
CVE-2024-52354	medium	6.5/10	WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-52356	medium	6.5/10	WordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-52358	medium	6.5/10	WordPress Responsive Addons for Elementor plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51571	medium	6.5/10	WordPress MasterBip para Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51575	medium	6.5/10	WordPress Extender All In One For Elementor plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51580	medium	6.5/10	WordPress Clever Addons for Elementor plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51581	medium	6.5/10	WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago