Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

356,022

All time

Critical · Active

12,717

CVSS ≥ 9.0

New · 14 days

2,258

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 1501–1530 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-3805	high	8.6/10	Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass	Dec 22, 2022 3y ago
CVE-2022-3862	—	—	Livemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS	Dec 12, 2022 3y ago
CVE-2022-2116	—	—	Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting	Aug 15, 2022 4y ago
CVE-2022-29455	medium	4.7/10	WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability	Jun 13, 2022 4y ago
CVE-2022-1442	high	7.5/10	Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure	May 10, 2022 4y ago
CVE-2022-1329	high	8.8/10	Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution	Apr 19, 2022 4y ago
CVE-2022-0327	—	—	Master Addons for Elementor < 1.8.2 - Reflected Cross-Site Scripting	Mar 14, 2022 4y ago
CVE-2022-0683	medium	6.1/10	Essential Addons for Elementor Lite <= 5.0.8 Reflected Cross-Site Scripting	Feb 24, 2022 4y ago
CVE-2022-0320	—	—	Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI	Feb 1, 2022 4y ago
CVE-2021-24949	—	—	The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection	Jan 10, 2022 4y ago
CVE-2021-24948	—	—	The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure	Jan 10, 2022 4y ago
CVE-2021-25027	—	—	PowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting	Jan 3, 2022 4y ago
CVE-2021-24967	—	—	Contact Form & Lead Form Elementor Builder < 1.6.4 - Unauthenticated Stored Cross-Site Scripting	Dec 27, 2021 4y ago
CVE-2021-24891	—	—	Elementor < 3.4.8 - DOM Cross-Site-Scripting	Nov 23, 2021 4y ago
CVE-2021-42360	high	7.6/10	Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSS	Nov 17, 2021 4y ago
CVE-2021-24359	—	—	The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending	Jun 14, 2021 5y ago
CVE-2021-24358	—	—	The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect	Jun 14, 2021 5y ago
CVE-2021-24351	—	—	The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)	Jun 14, 2021 5y ago
CVE-2021-24292	—	—	Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS	May 17, 2021 5y ago
CVE-2021-24273	—	—	Clever Addons for Elementor < 2.1.0 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24271	—	—	Ultimate Addons for Elementor < 1.30.0 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24270	—	—	DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24269	—	—	Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24268	—	—	JetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24267	—	—	All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24266	—	—	The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24265	—	—	Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24264	—	—	Image Hover Effects - Elementor Addon < 1.3.4 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24263	—	—	PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24262	—	—	WooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS	May 5, 2021 5y ago