Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

355,787

All time

Critical · Active

12,693

CVSS ≥ 9.0

New · 14 days

2,218

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 901–930 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-4360	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag	Aug 9, 2024 2y ago
CVE-2024-4643	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting	Aug 2, 2024 2y ago
CVE-2024-39644	medium	6.5/10	WordPress Black Widgets For Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39649	medium	6.5/10	WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39662	medium	6.5/10	WordPress Black Widgets For Elementor plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39667	medium	6.5/10	WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-39668	medium	6.5/10	WordPress Extensions for Elementor plugin <= 2.0.31 - Cross Site Scripting (XSS) vulnerability	Aug 1, 2024 2y ago
CVE-2024-38768	medium	4.3/10	WordPress The Pack Elementor addons plugin <= 2.0.8.6 - Local File Inclusion vulnerability	Aug 1, 2024 2y ago
CVE-2024-38772	medium	6.5/10	WordPress JetWidgets for Elementor and WooCommerce plugin <= 1.1.7 - Contributor+ Limited Local File Inclusion vulnerability	Aug 1, 2024 2y ago
CVE-2024-39634	high	8.8/10	WordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerability	Aug 1, 2024 2y ago
CVE-2024-2455	medium	6.4/10	Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL	Aug 1, 2024 2y ago
CVE-2024-5614	medium	5.3/10	Piotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information Exposure	Jul 27, 2024 2y ago
CVE-2024-5818	medium	6.4/10	Royal Elementor Addons and Templates <= 1.3.980 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Magazine Grid/Slider Widget	Jul 24, 2024 2y ago
CVE-2024-38730	medium	4.9/10	WordPress Magical Addons For Elementor plugin <= 1.1.41 - Server Side Request Forgery (SSRF) vulnerability	Jul 22, 2024 2y ago
CVE-2024-33933	medium	6.5/10	WordPress Elementor Header & Footer Builder plugin <= 1.6.35 - Contributor+ DOM-Based Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-35656	high	7.1/10	WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37229	medium	6.5/10	WordPress Blogmentor – Blog Layouts for Elementor plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37263	medium	6.5/10	WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37428	medium	6.5/10	WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability	Jul 22, 2024 2y ago
CVE-2024-37565	medium	5.9/10	WordPress Gum Elementor Addon plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-37922	medium	6.5/10	WordPress Premium Addons for Elementor plugin <= 4.10.34 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-38674	medium	6.5/10	WordPress SKT Addons for Elementor plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-38681	medium	6.5/10	WordPress Magical Addons For Elementor plugin <= 1.1.41 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-38687	medium	6.5/10	WordPress Sky Addons for Elementor plugin <= 2.5.5 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-38705	medium	6.5/10	WordPress ElementInvader Addons for Elementor plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-38710	medium	5.9/10	WordPress Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin <= 2.0.6.2 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-38718	medium	6.5/10	WordPress Download Button for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability	Jul 20, 2024 2y ago
CVE-2024-5555	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	Jul 18, 2024 2y ago
CVE-2024-5554	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting	Jul 18, 2024 2y ago
CVE-2024-4780	medium	6.4/10	Image Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link Parameter	Jul 16, 2024 2y ago