Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

352,292

All time

Critical · Active

12,448

CVSS ≥ 9.0

New · 14 days

1,113

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1501–1529 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-42360	high	7.6/10	Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSS	Nov 17, 2021 4y ago
CVE-2021-24359	—	—	The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending	Jun 14, 2021 5y ago
CVE-2021-24358	—	—	The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect	Jun 14, 2021 5y ago
CVE-2021-24351	—	—	The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)	Jun 14, 2021 5y ago
CVE-2021-24292	—	—	Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS	May 17, 2021 5y ago
CVE-2021-24273	—	—	Clever Addons for Elementor < 2.1.0 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24271	—	—	Ultimate Addons for Elementor < 1.30.0 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24270	—	—	DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24269	—	—	Sina Extension for Elementor < 3.3.12 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24268	—	—	JetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24267	—	—	All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24266	—	—	The Plus Addons for Elementor Page Builder Lite < 2.0.6 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24265	—	—	Rife Elementor Extensions & Templates < 1.1.6 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24264	—	—	Image Hover Effects - Elementor Addon < 1.3.4 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24263	—	—	PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24262	—	—	WooLentor - WooCommerce Elementor Addons + Builder < 1.8.6 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24261	—	—	HT Mega - Absolute Addons for Elementor Page Builder < 1.5.7 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24260	—	—	Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24259	—	—	Elementor Addon Elements < 1.11.2 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24257	—	—	Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)	May 5, 2021 5y ago
CVE-2021-24256	—	—	Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24255	—	—	Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)	May 5, 2021 5y ago
CVE-2021-24206	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget	Apr 5, 2021 5y ago
CVE-2021-24205	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget	Apr 5, 2021 5y ago
CVE-2021-24204	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget	Apr 5, 2021 5y ago
CVE-2021-24203	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget	Apr 5, 2021 5y ago
CVE-2021-24202	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget	Apr 5, 2021 5y ago
CVE-2021-24201	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element	Apr 5, 2021 5y ago
CVE-2021-24175	—	—	The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass	Apr 5, 2021 5y ago