Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

355,733

All time

Critical · Active

12,692

CVSS ≥ 9.0

New · 14 days

2,176

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 751–780 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-51584	medium	6.5/10	WordPress Marquee Elementor with Posts plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability	Nov 10, 2024 1y ago
CVE-2024-51587	medium	6.5/10	WordPress Definitive Addons for Elementor plugin <= 1.5.16 - Stored Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51588	medium	6.5/10	WordPress Super Addons for Elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51590	medium	6.5/10	WordPress Hoo Addons for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51597	medium	6.5/10	WordPress ThemeShark Templates & Widgets for Elementor plugin <= 1.1.7 - Stored Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51629	medium	6.5/10	WordPress Header Footer Composer for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51662	medium	6.5/10	WordPress Black Widgets For Elementor plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51674	medium	6.5/10	WordPress Sastra Essential Addons for Elementor plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-51675	medium	6.5/10	WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10352	medium	4.3/10	Magical Addons For Elementor <= 1.2.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template	Nov 9, 2024 1y ago
CVE-2024-51787	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability	Nov 9, 2024 1y ago
CVE-2024-10693	medium	4.3/10	SKT Addons for Elementor <= 3.3 - Authenticated (Contributor+) Post Disclosure	Nov 9, 2024 1y ago
CVE-2024-8960	medium	6.4/10	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 9, 2024 1y ago
CVE-2024-10779	medium	5.3/10	Cowidgets – Elementor Addons <= 1.2.0 - Authenticated (Contributor+) Post Disclosure	Nov 9, 2024 1y ago
CVE-2024-10325	medium	6.4/10	Elementor Header & Footer Builder <= 1.6.45 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Nov 8, 2024 1y ago
CVE-2024-8442	medium	6.4/10	Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget	Nov 7, 2024 1y ago
CVE-2024-10329	medium	4.3/10	Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure	Nov 5, 2024 1y ago
CVE-2024-10319	medium	4.3/10	140+ Widgets \| Xpro Addons For Elementor – FREE <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template	Nov 5, 2024 1y ago
CVE-2024-51680	medium	6.5/10	WordPress Cresta Addons for Elementor plugin <= 1.0.9 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51682	medium	6.5/10	WordPress HT Builder – WordPress Theme Builder for Elementor plugin <= 1.3.0 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51683	medium	6.5/10	WordPress Custom post type templates for Elementor plugin <= 1.10.1 - Stored Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51685	medium	5.9/10	WordPress Accordion title for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Nov 4, 2024 1y ago
CVE-2024-51665	medium	4.9/10	WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability	Nov 4, 2024 1y ago
CVE-2024-10310	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget	Nov 2, 2024 1y ago
CVE-2024-48045	medium	4.3/10	WordPress Happy Elementor Addons plugin <= 3.12.3 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-37269	medium	5.3/10	WordPress Masterstudy Elementor Widgets plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43293	medium	4.3/10	WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-43932	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.6.2 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-47361	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerability	Nov 1, 2024 1y ago
CVE-2024-9388	medium	6.4/10	Black Widgets For Elementor <= 1.3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 30, 2024 1y ago