EP
Product
Elementor Pro
10
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 7Low 0
Watch
Add Elementor Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32475 | 9.0 | Aug 19 | WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability Affected: through 4.2.1 |
| CVE-2023-3124 | 8.8 | Jun 7 | Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option Affected: before 3.11.7 |
| CVE-2020-26596 | 8.8 | Oct 7 | The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Editor role is needed… Affected: through 3.0.5 |
| CVE-2024-23523 | 6.5 | Mar 16 | WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability Affected: through 3.19.2 |
| CVE-2024-35656 | 6.1 | Jul 22 | WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 3.21.2 |
| CVE-2023-35050 | 5.4 | Jun 19 | WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability Affected: through 3.13.0 |
| CVE-2024-1521 | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload Affected: before 3.20.2 |
| CVE-2024-2121 | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.20.2 |
| CVE-2024-2781 | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag Affected: before 3.20.2 |
| CVE-2024-1364 | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting Affected: before 3.20.2 |
Showing 10