Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

340,632

All time

Critical · Active

11,008

CVSS ≥ 9.0

New · 14 days

2,963

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1111–1140 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-34547	medium	6.5/10	WordPress Magical Addons For Elementor plugin <= 1.1.34 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34548	medium	6.5/10	WordPress All-in-One Addons for Elementor – WidgetKit plugin <= 2.4.8 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34562	medium	6.5/10	WordPress Move Addons for Elementor plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34563	medium	6.5/10	WordPress Gold Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34570	medium	5.9/10	WordPress Xpro Elementor Addons plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-34572	medium	6.5/10	WordPress Fancy Elementor Flipbox plugin <= 2.4.2 - Cross Site Scripting (XSS) vulnerability	May 8, 2024 2y ago
CVE-2024-4346	critical	9.1/10	Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Deletion	May 7, 2024 2y ago
CVE-2024-4345	critical	9.8/10	Startklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File Upload	May 7, 2024 2y ago
CVE-2024-34373	medium	6.5/10	WordPress The Plus Addons for Elementor plugin <= 5.4.2 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-34374	medium	6.5/10	WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability	May 6, 2024 2y ago
CVE-2024-33914	medium	4.3/10	WordPress Exclusive Addons for Elementor plugin <= 2.6.9.1 - Broken Access Control on Post Duplication vulnerability	May 3, 2024 2y ago
CVE-2024-33919	medium	6.5/10	WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerability	May 3, 2024 2y ago
CVE-2024-33945	medium	6.5/10	WordPress Eleblog – Elementor Blog And Magazine Addons plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability	May 3, 2024 2y ago
CVE-2024-3936	medium	4.3/10	The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.6.1 - Missing Authorization	May 2, 2024 2y ago
CVE-2024-3743	medium	6.4/10	Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	May 2, 2024 2y ago
CVE-2024-2751	medium	6.4/10	Exclusive Addons for Elementor <= 2.6.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via InfoBox	May 2, 2024 2y ago
CVE-2024-2082	high	7.2/10	EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Unauthenticated Stored Cross-Site Scripting	May 2, 2024 2y ago
CVE-2024-3307	medium	6.4/10	HT Mega – Absolute Addons For Elementor <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget	May 2, 2024 2y ago
CVE-2024-2349	medium	6.4/10	Fancy Elementor Flipbox <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fancy Elementor Flipbox Widget	May 2, 2024 2y ago
CVE-2024-3891	medium	6.4/10	Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags	May 2, 2024 2y ago
CVE-2024-3197	medium	6.4/10	The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes	May 2, 2024 2y ago
CVE-2024-3715	high	7.2/10	Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting	May 2, 2024 2y ago
CVE-2024-3199	medium	6.4/10	The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget	May 2, 2024 2y ago
CVE-2024-4265	medium	6.4/10	Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.5.9 - Contributor+ Stored Cross-Site Scripting	May 2, 2024 2y ago
CVE-2024-2084	medium	6.4/10	HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget	May 2, 2024 2y ago
CVE-2024-3724	medium	6.4/10	Happy Addons for Elementor <= 3.10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Stack Group, Photo Stack, & Horizontal Timeline	May 2, 2024 2y ago
CVE-2024-1567	high	8.2/10	Royal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File Upload	May 2, 2024 2y ago
CVE-2024-3489	medium	6.4/10	Exclusive Addons for Elementor <= 2.6.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Expired Title	May 2, 2024 2y ago
CVE-2024-2043	medium	5.3/10	EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Missing Authorization to Sensitive Information Exposure	May 2, 2024 2y ago
CVE-2024-3499	high	8.8/10	ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module	May 2, 2024 2y ago