Elementor Ally vulnerabilities

2 vulnerabilities

Known vulnerabilities in Elementor Ally, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2025-32640elementorally+1
EPSS score
0.37%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Ally pojo-accessibility allows Stored XSS.This issue affects Ally: from n/a through <= 3.1.0.5.3CVE-2026-25386elementorally+1
EPSS score
0.25%
Missing Authorization vulnerability in Elementor Ally pojo-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ally: from n/a through <= 4.0.2.