Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

355,779

All time

Critical · Active

12,692

CVSS ≥ 9.0

New · 14 days

2,221

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 811–840 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-49292	medium	6.5/10	WordPress Exclusive Addons for Elementor plugin <= 2.7.1 - Cross-Site Scripting vulnerability	Oct 17, 2024 1y ago
CVE-2024-49310	medium	6.5/10	WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-49319	medium	6.5/10	WordPress Awesome Contact Form7 for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-43997	high	7.1/10	WordPress easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, Career Page for Elementor & Gutenberg plugin <= 2.4.14 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-48022	medium	6.5/10	WordPress Shortcode For Elementor Templates plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability	Oct 17, 2024 1y ago
CVE-2024-7417	medium	4.3/10	Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post Disclosure	Oct 17, 2024 1y ago
CVE-2024-49267	medium	6.5/10	WordPress Unlimited Addon For Elementor plugin <=2.0.0 - Cross Site Scripting (XSS) vulnerability	Oct 16, 2024 1y ago
CVE-2024-49251	high	7.5/10	WordPress Maan Addons For Elementor plugin <= 1.0.1 - Local File Inclusion vulnerability	Oct 16, 2024 1y ago
CVE-2024-49271	critical	9.1/10	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability	Oct 16, 2024 1y ago
CVE-2024-8921	medium	6.4/10	Zita Elementor Site Library <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 16, 2024 1y ago
CVE-2024-9444	medium	6.4/10	ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 16, 2024 1y ago
CVE-2024-9540	medium	4.3/10	Sina Extension for Elementor <= 3.5.7 - Authenticated (Contributor+) Sensitive Information Exposure via Sina Modal Box Widget Elementor Template	Oct 16, 2024 1y ago
CVE-2021-4447	high	8.8/10	Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation	Oct 16, 2024 1y ago
CVE-2021-4445	medium	6.5/10	Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update	Oct 16, 2024 1y ago
CVE-2021-4446	medium	6.3/10	Essential Addons for Elementor <= 4.6.4 - Missing Authorization	Oct 16, 2024 1y ago
CVE-2024-8902	medium	4.3/10	Elementor Addon Elements <= 1.13.8 - Authenticated (Contributor+) Sensitive Information Exposure via table_saved_sections	Oct 12, 2024 2y ago
CVE-2024-47353	medium	4.7/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerability	Oct 11, 2024 2y ago
CVE-2024-9538	medium	4.3/10	ShopLentor <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template	Oct 11, 2024 2y ago
CVE-2024-8913	medium	4.3/10	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via content_template	Oct 11, 2024 2y ago
CVE-2024-9064	medium	6.4/10	Elementor Inline SVG <= 1.2.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload	Oct 10, 2024 2y ago
CVE-2024-8482	medium	6.4/10	Royal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member Widget	Oct 8, 2024 2y ago
CVE-2024-44024	medium	6.5/10	WordPress Medical Addon for Elementor plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-44026	medium	6.5/10	WordPress Charity Addon for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-44027	medium	6.5/10	WordPress Gum Elementor Addon plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-44032	medium	6.5/10	WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-44033	medium	6.5/10	WordPress Primary Addon for Elementor plugin <= 1.5.7 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-44035	medium	6.5/10	WordPress Gum Elementor Addon plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-45454	high	7.1/10	WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-47329	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago
CVE-2024-47332	medium	6.5/10	WordPress Sky Addons for Elementor plugin <= 2.5.11 - Cross Site Scripting (XSS) vulnerability	Oct 6, 2024 2y ago