HT
Vendor
https://elementor.com/
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-3076 | EW Elementor Website Builder Pro https://elementor.com/ | 5.4 | Jun 10 | Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-8494 | EW Elementor Website Builder Pro https://elementor.com/ | 6.5 | Jan 30 | Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode |
| CVE-2024-4107 | EW Elementor Website Builder Pro https://elementor.com/ | 5.4 | May 9 | Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting |
| CVE-2024-1521 | EW Elementor Website Builder Pro https://elementor.com/ | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload |
| CVE-2024-2120 | EW Elementor Website Builder Pro https://elementor.com/ | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation |
| CVE-2024-2121 | EW Elementor Website Builder Pro https://elementor.com/ | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-2781 | EW Elementor Website Builder Pro https://elementor.com/ | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag |
| CVE-2024-1364 | EW Elementor Website Builder Pro https://elementor.com/ | 5.4 | Mar 27 | Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting |
| CVE-2023-3124 | EW Elementor Website Builder Pro https://elementor.com/ | 8.8 | Jun 7 | Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option |
