Elementor Website Builder vulnerabilities
12 vulnerabilities
Known vulnerabilities in Elementor Website Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-67588elementorelementor website builder+1
EPSS score0.19%
Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through <= 3.33.0.CVE-2024-54444elementorelementor website builder+2EPSS score0.29%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through <= 3.25.10.CVE-2024-37437elementorelementor website builder+2EPSS score0.34%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor.This issue affects Elementor Website Builder: from n/a through <= 3.22.1.CVE-2024-24934elementorelementor website builder+2EPSS score0.71%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Elementor Elementor Website Builder allows Manipulating Web Input to File System Calls.This issue affects Elementor Website Builder: from n/a through 3.19.0.CVE-2024-50555elementorelementor website builder+2EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through <= 3.29.0.CVE-2026-62062elementorelementor website builder+1EPSS score0.13%
Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery.
This issue affects Elementor Website Builder: from n/a through 4.3.1.CVE-2026-57619elementorelementor website builder+1EPSS score0.37%
Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions.CVE-2026-49782elementorelementor website builder+1EPSS score0.25%
Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Elementor Website Builder: from n/a through 4.1.0.CVE-2026-32445elementorelementor website builder+1EPSS score0.32%
Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.CVE-2026-32352elementorelementor website builder+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows DOM-Based XSS.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.CVE-2023-47504elementorelementor website builder+2EPSS score1.45%
Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.CVE-2023-33922elementorelementor website builder+2EPSS score0.34%
Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2.