https://elementor.com/ vulnerabilities
9 published CVEs name https://elementor.com/ among the affected products.
- 9Published CVEs9 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-3076
Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
https://elementor.com/ · Elementor Website Builder Pro
Medium6.4 - CVE-2024-8494
Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
https://elementor.com/ · Elementor Website Builder Pro
Medium4.3 - CVE-2024-4107
Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
https://elementor.com/ · Elementor Website Builder Pro
Medium6.4 - CVE-2024-1521
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload
https://elementor.com/ · Elementor Website Builder Pro
Medium6.4 - CVE-2024-2120
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation
https://elementor.com/ · Elementor Website Builder Pro
Medium5.4 - CVE-2024-2121
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
https://elementor.com/ · Elementor Website Builder Pro
Medium5.4 - CVE-2024-2781
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag
https://elementor.com/ · Elementor Website Builder Pro
Medium6.4 - CVE-2024-1364
Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting
https://elementor.com/ · Elementor Website Builder Pro
Medium6.4 - CVE-2023-3124
Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
https://elementor.com/ · Elementor Website Builder Pro
High8.8