Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

355,779

All time

Critical · Active

12,692

CVSS ≥ 9.0

New · 14 days

2,221

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 781–810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-49654	high	7.1/10	WordPress Extra Privacy for Elementor plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-49665	medium	6.5/10	WordPress Web Bricks Addons for Elementor plugin <= 1.1.1 - Stored Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-49667	medium	6.5/10	WordPress Local Business Addons For Elementor plugin <= 1.1.5 - Stored Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-10360	medium	4.3/10	Move Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Oct 29, 2024 1y ago
CVE-2024-10266	medium	6.4/10	Premium Addons for Elementor <= 4.10.60 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Video Box Widget	Oct 29, 2024 1y ago
CVE-2024-49679	medium	5.9/10	WordPress WPKoi Templates for Elementor plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability	Oct 29, 2024 1y ago
CVE-2024-9376	medium	6.4/10	Kata Plus – Addons for Elementor – Widgets, Extensions and Templates <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 29, 2024 1y ago
CVE-2024-10312	medium	4.3/10	Exclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Oct 29, 2024 1y ago
CVE-2024-50453	high	7.5/10	WordPress The Pack Elementor addons plugin <= 2.0.9 - Local File Inclusion vulnerability	Oct 28, 2024 1y ago
CVE-2024-50433	medium	6.5/10	WordPress Sky Addons for Elementor plugin <= 2.5.15 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50447	medium	6.5/10	WordPress Envo's Elementor Templates & Widgets for WooCommerce plugin <= 1.4.19 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50449	medium	6.5/10	WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.4 - Cross Site Scripting (XSS) vulnerability	Oct 28, 2024 1y ago
CVE-2024-50442	medium	6.5/10	WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability	Oct 28, 2024 1y ago
CVE-2024-10357	medium	4.3/10	Clever Addons for Elementor <= 2.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates	Oct 26, 2024 1y ago
CVE-2024-10091	medium	6.4/10	ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget	Oct 26, 2024 1y ago
CVE-2024-49693	medium	6.5/10	WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Oct 24, 2024 1y ago
CVE-2024-49702	medium	6.5/10	WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Oct 24, 2024 1y ago
CVE-2024-10050	medium	4.3/10	Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcode	Oct 24, 2024 1y ago
CVE-2024-49676	medium	6.6/10	WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability	Oct 23, 2024 1y ago
CVE-2024-9530	medium	4.3/10	Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure	Oct 23, 2024 1y ago
CVE-2024-9541	medium	4.3/10	News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template	Oct 22, 2024 1y ago
CVE-2024-49630	medium	6.5/10	WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability	Oct 20, 2024 1y ago
CVE-2024-49631	medium	6.5/10	WordPress Easy Addons for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Oct 20, 2024 1y ago
CVE-2024-49233	medium	6.5/10	WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49234	medium	6.5/10	WordPress Plexx Elementor Extension plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49243	high	7.5/10	WordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability	Oct 18, 2024 1y ago
CVE-2024-49259	medium	6.5/10	WordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49262	medium	6.5/10	WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49264	medium	6.5/10	WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49277	medium	6.5/10	WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago