Vendors / Elementor Records 83 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 15
Exploited now Elementor records in CISA KEV No Elementor vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 54
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.08565 · Published 2020-05-17 · No fix listed CWE-434
Priority MEDIUM 48
An issue was discovered in Elementor 2.7.4.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.03072 · Published 2020-04-22 · No fix listed CWE-434
Priority MEDIUM 41
The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01381 · Published 2019-09-10 · No fix listed CWE-269
Priority LOW 30
The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01303 · Published 2019-10-07 · No fix listed CWE-79
Priority LOW 28
The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all versions up to, and including, 3.29.0 due to insufficient input sanitization and…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2025-06-10 · No fix listed CWE-79
Priority LOW 26
A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00702 · Published 2020-09-16 · No fix listed CWE-79
Priority LOW 26
The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00761 · Published 2020-06-05 · No fix listed CWE-79
Priority LOW 26
The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00761 · Published 2020-06-05 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
7 15 60 1 0
THREATIST.IORead the docs