Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

352,229

All time

Critical · Active

12,441

CVSS ≥ 9.0

New · 14 days

2,145

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 781–810 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-10091	medium	6.4/10	ElementsKit Elementor addons <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget	Oct 26, 2024 1y ago
CVE-2024-49693	medium	6.5/10	WordPress Mega Elements – Addons for Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Oct 24, 2024 1y ago
CVE-2024-49702	medium	6.5/10	WordPress myCred Elementor plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability	Oct 24, 2024 1y ago
CVE-2024-10050	medium	4.3/10	Elementor Header & Footer Builder <= 1.6.43 - Authenticated (Contributor+) Information Disclosure via Shortcode	Oct 24, 2024 1y ago
CVE-2024-49676	medium	6.6/10	WordPress Custom Icons for Elementor plugin <= 0.3.3 - Arbitrary File Upload vulnerability	Oct 23, 2024 1y ago
CVE-2024-9530	medium	4.3/10	Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure	Oct 23, 2024 1y ago
CVE-2024-9541	medium	4.3/10	News Kit Elementor Addons <= 1.2.1 - Authenticated (Contributor+) Sensitive Information Exposure via Canvas Menu Elementor Template	Oct 22, 2024 1y ago
CVE-2024-49630	medium	6.5/10	WordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerability	Oct 20, 2024 1y ago
CVE-2024-49631	medium	6.5/10	WordPress Easy Addons for Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability	Oct 20, 2024 1y ago
CVE-2024-49233	medium	6.5/10	WordPress MAS Elementor plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49234	medium	6.5/10	WordPress Plexx Elementor Extension plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Oct 18, 2024 1y ago
CVE-2024-49243	high	7.5/10	WordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability	Oct 18, 2024 1y ago
CVE-2024-49259	medium	6.5/10	WordPress Primary Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49262	medium	6.5/10	WordPress Country Flags for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49264	medium	6.5/10	WordPress Events Addon for Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49277	medium	6.5/10	WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49292	medium	6.5/10	WordPress Exclusive Addons for Elementor plugin <= 2.7.1 - Cross-Site Scripting vulnerability	Oct 17, 2024 1y ago
CVE-2024-49310	medium	6.5/10	WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49319	medium	6.5/10	WordPress Awesome Contact Form7 for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-43997	high	7.1/10	WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-48022	medium	6.5/10	WordPress Shortcode For Elementor Templates plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-7417	medium	4.3/10	Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure	Oct 17, 2024 1y ago
CVE-2024-49267	medium	6.5/10	WordPress Unlimited Addon For Elementor plugin <=2.0.0 - Cross Site Scripting (XSS) vulnerability	Oct 16, 2024 1y ago
CVE-2024-49251	high	7.5/10	WordPress Maan Addons For Elementor plugin <= 1.0.1 - Local File Inclusion vulnerability	Oct 16, 2024 1y ago
CVE-2024-49271	critical	9.1/10	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability	Oct 16, 2024 1y ago
CVE-2024-8921	medium	6.4/10	Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 16, 2024 1y ago
CVE-2024-9444	medium	6.4/10	ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 16, 2024 1y ago
CVE-2024-9540	medium	4.3/10	Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template	Oct 16, 2024 1y ago
CVE-2021-4447	high	8.8/10	Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation	Oct 16, 2024 1y ago
CVE-2021-4445	medium	6.5/10	Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update	Oct 16, 2024 1y ago