Read the docs

Elementor

Records83All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Elementor records in CISA KEV

No Elementor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Website Builder 37 records HIGH Elementor Page Builder 8 records MEDIUM Elementor Pro 7 records MEDIUM Site Mailer 1 record LOW

Records

1 record in Site Mailer · all components

TI-2025-01130 CVE-2025-1319 · GHSA-qwgw-jf68-fjmq

Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 32

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitizatio…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00391 Published 2025-02-28 No fix listed CWE-79
Open these records in search →