Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

356,023

All time

Critical · Active

12,717

CVSS ≥ 9.0

New · 14 days

2,259

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 1531–1543 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2021-24261	—	—	HT Mega - Absolute Addons for Elementor Page Builder < 1.5.7 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24260	—	—	Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24259	—	—	Elementor Addon Elements < 1.11.2 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24257	—	—	Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)	May 5, 2021 5y ago
CVE-2021-24256	—	—	Elementor - Header, Footer & Blocks Template < 1.5.8 - Contributor+ Stored XSS	May 5, 2021 5y ago
CVE-2021-24255	—	—	Essential Addons for Elementor < 4.5.4 - Contributor+ Stored Cross-Site Scripting (XSS)	May 5, 2021 5y ago
CVE-2021-24206	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget	Apr 5, 2021 5y ago
CVE-2021-24205	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget	Apr 5, 2021 5y ago
CVE-2021-24204	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget	Apr 5, 2021 5y ago
CVE-2021-24203	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget	Apr 5, 2021 5y ago
CVE-2021-24202	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget	Apr 5, 2021 5y ago
CVE-2021-24201	—	—	Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element	Apr 5, 2021 5y ago
CVE-2021-24175	—	—	The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass	Apr 5, 2021 5y ago