Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

352,226

All time

Critical · Active

12,441

CVSS ≥ 9.0

New · 14 days

2,142

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 721–750 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-8961	medium	6.4/10	Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders <= 6.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	Nov 15, 2024 1y ago
CVE-2024-10582	medium	4.3/10	Music Player for Elementor – Audio Player & Podcast Player <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Template Import	Nov 15, 2024 1y ago
CVE-2024-10897	medium	4.3/10	Tutor LMS Elementor Addons <= 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation	Nov 15, 2024 1y ago
CVE-2024-9059	medium	6.4/10	Royal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps Widget	Nov 13, 2024 1y ago
CVE-2024-10794	medium	4.3/10	Boostify Header Footer Builder for Elementor <= 1.3.6 - Authenticated (Contributor+) Post Disclosure	Nov 13, 2024 1y ago
CVE-2024-10850	medium	6.1/10	Razorpay Payment Button for Elementor <= 1.2.5 - Reflected Cross-Site Scripting	Nov 13, 2024 1y ago
CVE-2024-10778	medium	4.3/10	BuddyPress Builder for Elementor – BuddyBuilder <= 1.7.4 - Authenticated (Contributor+) Post Disclosure	Nov 13, 2024 1y ago
CVE-2024-10323	medium	6.4/10	JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 12, 2024 1y ago
CVE-2024-10538	medium	6.4/10	Happy Addons for Elementor <= 3.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison	Nov 12, 2024 1y ago
CVE-2024-52354	medium	6.5/10	WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-52356	medium	6.5/10	WordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-52358	medium	6.5/10	WordPress Responsive Addons for Elementor plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51571	medium	6.5/10	WordPress MasterBip para Elementor plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51575	medium	6.5/10	WordPress Extender All In One For Elementor plugin <= 1.0.3 - Stored Cross Site Scripting (XSS) vulnerability	Nov 11, 2024 1y ago
CVE-2024-51580	medium	6.5/10	WordPress Clever Addons for Elementor plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51581	medium	6.5/10	WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51584	medium	6.5/10	WordPress Marquee Elementor with Posts plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51587	medium	6.5/10	WordPress Definitive Addons for Elementor plugin <= 1.5.16 - Stored Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51588	medium	6.5/10	WordPress Super Addons for Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51590	medium	6.5/10	WordPress Hoo Addons for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51597	medium	6.5/10	WordPress ThemeShark Templates & Widgets for Elementor plugin <= 1.1.7 - Stored Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51629	medium	6.5/10	WordPress Header Footer Composer for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51662	medium	6.5/10	WordPress Black Widgets For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51674	medium	6.5/10	WordPress Sastra Essential Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51675	medium	6.5/10	WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10352	medium	4.3/10	Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template	Nov 9, 2024 1y ago
CVE-2024-51787	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10693	medium	4.3/10	SKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosure	Nov 9, 2024 1y ago
CVE-2024-8960	medium	6.4/10	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 9, 2024 1y ago
CVE-2024-10779	medium	5.3/10	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure	Nov 9, 2024 1y ago