Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

349,466

All time

Critical · Active

12,228

CVSS ≥ 9.0

New · 14 days

3,090

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1291–1320 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-29936	medium	6.5/10	WordPress Image Hover Effects – Elementor Addon plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29935	medium	6.5/10	WordPress Sina Extension for Elementor plugin <= 3.5.0 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29934	medium	6.5/10	WordPress Piotnet Addons For Elementor plugin <= 2.4.25 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29920	medium	6.5/10	WordPress Move Addons for Elementor plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29914	medium	6.5/10	WordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29913	medium	6.5/10	WordPress Tutor LMS Elementor Addons plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-29911	medium	6.5/10	WordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Cross Site Scripting (XSS) vulnerability	Mar 27, 2024 2y ago
CVE-2024-2120	medium	5.4/10	Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation	Mar 27, 2024 2y ago
CVE-2024-1521	medium	6.4/10	Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload	Mar 27, 2024 2y ago
CVE-2024-2781	medium	6.4/10	Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag	Mar 27, 2024 2y ago
CVE-2024-2121	medium	5.4/10	Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 27, 2024 2y ago
CVE-2024-1364	medium	6.4/10	Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting	Mar 27, 2024 2y ago
CVE-2024-2203	medium	6.4/10	The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget	Mar 27, 2024 2y ago
CVE-2024-2139	medium	6.4/10	Master Addons for Elementor <= 2.0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget	Mar 27, 2024 2y ago
CVE-2024-2210	medium	6.4/10	The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Team Member Listing	Mar 27, 2024 2y ago
CVE-2023-48777	critical	9.9/10	WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability	Mar 26, 2024 2y ago
CVE-2023-52214	medium	4.3/10	WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.3 - Broken Access Control vulnerability	Mar 26, 2024 2y ago
CVE-2024-30232	medium	6.5/10	WordPress Exclusive Addons for Elementor plugin <= 2.6.9 - Cross Site Scripting (XSS) vulnerability	Mar 26, 2024 2y ago
CVE-2024-24840	medium	4.3/10	WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability	Mar 23, 2024 2y ago
CVE-2024-2688	medium	5.4/10	EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated (Contributor+) Stored Cross-site Scripting via 'embedpress_doc_custom_color'	Mar 23, 2024 2y ago
CVE-2024-2131	medium	6.4/10	Move Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 23, 2024 2y ago
CVE-2024-2129	medium	6.4/10	WPBITS Addons For Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 20, 2024 2y ago
CVE-2024-29101	medium	6.5/10	WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29106	medium	6.5/10	WordPress Premium Addons for Elementor plugin <= 4.10.16 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29107	medium	6.5/10	WordPress Elementor Addon Elements plugin <= 1.12.10 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-29108	medium	6.5/10	WordPress Happy Addons for Elementor plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability	Mar 19, 2024 2y ago
CVE-2024-23523	medium	6.5/10	WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability	Mar 16, 2024 2y ago
CVE-2023-6525	medium	5.5/10	ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting	Mar 16, 2024 2y ago
CVE-2024-2042	medium	6.4/10	ElementsKit Elementor addons <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Accordion Widget	Mar 16, 2024 2y ago
CVE-2024-1239	medium	6.4/10	ElementsKit Elementor addons <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting	Mar 16, 2024 2y ago