Elementor vulnerabilities, page 4
68 vulnerabilities
Known vulnerabilities in Elementor products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.
CVE-2026-32352elementorelementor website builder+1
EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows DOM-Based XSS.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.CVE-2023-47504elementorelementor website builder+2EPSS score1.45%
Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.CVE-2023-47505elementorwebsite_builder+2EPSS score25.34%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elementor allows Cross-Site Scripting (XSS).This issue affects Elementor: from n/a through 3.16.4.CVE-2023-48777elementorwebsite_builder+2EPSS score4.10%
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.CVE-2023-0329elementorwebsite_builder+2EPSS score19.70%
The Elementor Website Builder WordPress plugin before 3.12.2 does not properly sanitize and escape the Replace URL parameter in the Tools module before using it in a SQL statement, leading to a SQL injection exploitable by users with the Administrator role.CVE-2023-3124elementorelementor_pro+2EPSS score22.72%
The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update arbitrary site options, which can lead to privilege escalation.CVE-2023-35050elementorelementor_pro+1EPSS score0.31%
Missing Authorization vulnerability in Elementor Elementor Pro.This issue affects Elementor Pro: from n/a through 3.13.0.CVE-2023-33922elementorelementor website builder+2EPSS score0.34%
Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2.