Vulnerabilities

TI-2025-02688 CVE-2025-3076 · GHSA-f2vg-8jhx-6m29

Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all versions up to, and including, 3.29.0 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00206 Published 2025-06-10 No fix listed CWE-79

TI-2020-13842 CVE-2020-20406 · GHSA-3v57-962h-6rcp

A stored XSS vulnerability exists in the Custom Link Attributes control Affect function…

LOW 26

A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00702 Published 2020-09-16 No fix listed CWE-79

TI-2020-10849 CVE-2020-13865 · GHSA-x43w-2h2j-j78h

The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored…

LOW 26

The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00761 Published 2020-06-05 No fix listed CWE-79

TI-2020-10848 CVE-2020-13864 · GHSA-r9cg-2h9q-6wpm

The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS…

LOW 26

The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00761 Published 2020-06-05 No fix listed CWE-79

TI-2020-10317 CVE-2020-13126 · GHSA-q42j-4cv4-vf65

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as…

MEDIUM 54

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.08565 Published 2020-05-17 No fix listed CWE-434

TI-2020-05695 CVE-2020-7055 · GHSA-4fj3-rhxv-8jrf

An issue was discovered in Elementor 2.7.4.

MEDIUM 48

An issue was discovered in Elementor 2.7.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.03072 Published 2020-04-22 No fix listed CWE-434

TI-2018-12996 CVE-2018-18379 · GHSA-xpw8-rw4c-h563

The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin…

LOW 30

The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01303 Published 2019-10-07 No fix listed CWE-79

TI-2017-13769 CVE-2017-18596 · GHSA-vqg9-c22m-rj53

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.

MEDIUM 41

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01381 Published 2019-09-10 No fix listed CWE-269

Vulnerabilities

Filters