Feed live

Elementor vulnerabilities - every known CVE across the builder and its add-ons

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Elementor's widget and template system pulls in a large third-party add-on ecosystem, which is where most disclosed CVEs originate rather than the core builder.

Total CVEs tracked

339,703

All time

Critical · Active

10,851

CVSS ≥ 9.0

New · 14 days

2,582

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 241–270 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2025-12778	medium	5.3/10	Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure	Nov 20, 2025 7mo ago
CVE-2025-6251	medium	6.4/10	Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting	Nov 19, 2025 8mo ago
CVE-2025-13196	medium	5.4/10	Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget	Nov 18, 2025 8mo ago
CVE-2025-64274	medium	4.3/10	WordPress WPKoi Templates for Elementor plugin <= 3.4.4 - Broken Access Control vulnerability	Nov 13, 2025 8mo ago
CVE-2025-11997	medium	5.3/10	Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure	Nov 11, 2025 8mo ago
CVE-2025-12837	medium	6.4/10	aThemes Addons for Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget	Nov 8, 2025 8mo ago
CVE-2025-6327	critical	10.0/10	WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability	Nov 6, 2025 8mo ago
CVE-2025-6325	critical	9.8/10	WordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability	Nov 6, 2025 8mo ago
CVE-2025-62041	high	7.1/10	WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 8mo ago
CVE-2025-62012	medium	6.5/10	WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability	Nov 6, 2025 8mo ago
CVE-2025-11820	medium	6.4/10	Graphina – Elementor Charts and Graphs <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Widgets	Nov 5, 2025 8mo ago
CVE-2025-10873	—	—	Elementinvader Addons for Elementor < 1.4.1 – Unauthenticated Arbitrary Email Sending	Nov 5, 2025 8mo ago
CVE-2025-64361	medium	6.5/10	WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability	Oct 31, 2025 8mo ago
CVE-2025-64360	high	7.5/10	WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability	Oct 31, 2025 8mo ago
CVE-2025-64352	low	2.7/10	WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerability	Oct 31, 2025 8mo ago
CVE-2025-8489	critical	9.8/10	King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation	Oct 31, 2025 8mo ago
CVE-2025-64211	medium	5.3/10	WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability	Oct 29, 2025 8mo ago
CVE-2025-64210	medium	5.4/10	WordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability	Oct 29, 2025 8mo ago
CVE-2025-62923	medium	6.5/10	WordPress Marquee Addons for Elementor plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 8mo ago
CVE-2025-62889	medium	6.5/10	WordPress King Addons for Elementor plugin <= 51.1.61 - Broken Access Control vulnerability	Oct 27, 2025 8mo ago
CVE-2025-62887	medium	6.5/10	WordPress King Addons for Elementor plugin <= 51.1.61 - Cross Site Scripting (XSS) vulnerability	Oct 27, 2025 8mo ago
CVE-2025-11888	low	2.7/10	ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update	Oct 25, 2025 8mo ago
CVE-2025-8666	medium	6.4/10	Testimonial Carousel For Elementor <= 11.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	Oct 25, 2025 8mo ago
CVE-2025-11823	medium	6.4/10	ShopLentor – WooCommerce Builder for Elementor & Gutenberg +21 Modules – All in One Solution <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Oct 25, 2025 8mo ago
CVE-2025-9978	—	—	Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS	Oct 24, 2025 8mo ago
CVE-2025-62019	medium	6.5/10	WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.8 - Broken Access Control vulnerability	Oct 22, 2025 8mo ago
CVE-2025-59007	critical	9.8/10	WordPress TF Woo Product Grid Addon For Elementor Plugin <= 1.0.1 - Deserialization of untrusted data Vulnerability	Oct 22, 2025 8mo ago
CVE-2025-49939	medium	6.5/10	WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability	Oct 22, 2025 8mo ago
CVE-2025-49934	medium	6.5/10	WordPress JetBlocks For Elementor plugin <= 1.3.18 - Cross Site Scripting (XSS) vulnerability	Oct 22, 2025 8mo ago
CVE-2025-11536	medium	5.0/10	Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery	Oct 20, 2025 9mo ago