Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

355,815

All time

Critical · Active

12,695

CVSS ≥ 9.0

New · 14 days

2,184

Newly disclosed

Feed last synced

51 mins ago

Data freshness

Showing 1231–1260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-3645	medium	6.4/10	Essential Addons for Elementor Pro <= 5.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_html_tag'	Apr 22, 2024 2y ago
CVE-2024-32698	medium	6.5/10	WordPress Happy Addons for Elementor plugin <= 3.10.4 - Cross Site Scripting (XSS) vulnerability	Apr 22, 2024 2y ago
CVE-2024-1730	medium	5.4/10	Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	Apr 20, 2024 2y ago
CVE-2024-1057	medium	6.4/10	ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	Apr 20, 2024 2y ago
CVE-2024-32572	medium	6.5/10	WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability	Apr 18, 2024 2y ago
CVE-2024-32592	medium	6.5/10	WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability	Apr 18, 2024 2y ago
CVE-2024-32593	medium	6.5/10	WordPress WPBITS Addons For Elementor Page Builder plugin <= 1.3.4.2 - Cross Site Scripting (XSS) vulnerability	Apr 18, 2024 2y ago
CVE-2024-1429	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget	Apr 18, 2024 2y ago
CVE-2024-1426	medium	6.4/10	Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget	Apr 18, 2024 2y ago
CVE-2024-3333	medium	6.4/10	Essential Addons for Elementor <= 5.9.14 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget URL Attribute	Apr 17, 2024 2y ago
CVE-2024-32505	medium	6.5/10	WordPress ElementsKit Elementor addons plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability	Apr 17, 2024 2y ago
CVE-2024-32508	medium	6.5/10	WordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability	Apr 17, 2024 2y ago
CVE-2024-32515	medium	5.4/10	WordPress Mega Addons For Elementor plugin <= 1.8 - Broken Access Control vulnerability	Apr 17, 2024 2y ago
CVE-2024-32557	medium	6.5/10	WordPress Exclusive Addons for Elementor plugin <= 2.6.9.2 - Cross Site Scripting (XSS) vulnerability	Apr 16, 2024 2y ago
CVE-2024-31289	medium	4.3/10	WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability	Apr 12, 2024 2y ago
CVE-2024-2137	medium	6.4/10	All-in-One Addons for Elementor – WidgetKit <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Widgets	Apr 12, 2024 2y ago
CVE-2024-2966	medium	5.3/10	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search	Apr 11, 2024 2y ago
CVE-2024-31278	medium	4.3/10	WordPress Premium Addons for Elementor plugin <= 4.10.22 - Sensitive Data Exposure vulnerability	Apr 10, 2024 2y ago
CVE-2024-2655	medium	6.4/10	Elementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name	Apr 10, 2024 2y ago
CVE-2024-2539	medium	6.4/10	Elementor Addons by Livemesh <= 8.3.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via widget _id attribute	Apr 10, 2024 2y ago
CVE-2024-2666	medium	5.4/10	Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting	Apr 10, 2024 2y ago
CVE-2024-2664	medium	6.4/10	Premium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site Scripting	Apr 10, 2024 2y ago
CVE-2024-2665	medium	6.4/10	Premium Addons for Elementor <= 4.10.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button	Apr 10, 2024 2y ago
CVE-2024-2138	medium	6.4/10	JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget	Apr 9, 2024 2y ago
CVE-2024-1498	medium	6.4/10	Happy Addons for Elementor <= 3.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Stack Widget	Apr 9, 2024 2y ago
CVE-2024-2787	medium	6.4/10	Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag	Apr 9, 2024 2y ago
CVE-2024-1458	medium	6.4/10	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text Widget	Apr 9, 2024 2y ago
CVE-2024-2792	medium	6.4/10	Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Text Separator' and 'Image Compare' Widget	Apr 9, 2024 2y ago
CVE-2024-1461	medium	6.4/10	Elementor Addons by Livemesh <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Members Widget	Apr 9, 2024 2y ago
CVE-2024-2946	medium	6.4/10	ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.4 - Authenticated (Contributor+) Stored Cross-site Scripting via QR Code Widget	Apr 9, 2024 2y ago