WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elementor
Published
2024-02-07
Title
Elementor Website Builder – More than Just a Page Builder < 3.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt
Slug
elementor
Published
2024-03-26
Title
Elementor Website Builder < 3.20.3 - Contributor+ DOM Stored XSS
Slug
elementor
Published
2024-05-20
Title
Elementor Website Builder < 3.21.6 - Contributor+ DOM Stored XSS
Slug
elementor
Published
2024-06-28
Title
Elementor Website Builder < 3.22.2 - Contributor+ Arbitrary SVG Download
Slug
elementor
Published
2024-09-10
Title
Elementor Website Builder – More than Just a Page Builder < 3.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets
Slug
elementor
Published
2024-10-14
Title
Elementor < 3.24.6 - Contributor+ Information Exposure via get_image_alt
Slug
elementor
Published
2024-11-25
Title
Elementor Website Builder < 3.25.8 - Contributor+ Stored XSS
Slug
elementor
Published
2024-12-20
Title
Elementor Website Builder < 3.25.10 - Contributor+ Stored XSS via Typography Settings
Slug
elementor
Published
2025-02-19
Title
Elementor Website Builder < 3.27.5 - Contributor+ Stored XSS
Slug
elementor
Published
2025-02-24
Title
Elementor Website Builder < 3.25.11 - Contributor+ Stored XSS
Slug
elementor
Published
2025-06-19
Title
Elementor Website Builder < 3.29.1 - Contributor+ Stored XSS
Slug
elementor
Published
2025-07-28
Title
Elementor < 3.29.1 - Contributor+ Stored XSS
Slug
elementor
Published
2025-07-28
Title
Elementor < 3.30.3 - Contributor+ Stored XSS via Text Path Widget
Slug
elementor
Published
2025-08-11
Title
Elementor < 3.30.3 - Admin+ Arbitrary File Read via Image Import
Slug
elementor
Published
2025-11-25
Title
Elementor Website Builder < 3.33.1 - Missing Authorization
Slug
elementor
Published
2025-12-15
Title
Elementor < 3.33.4 - Contributor+ Stored DOM-Based XSS via Text Path
Slug
elementor-pro
Published
2018-10-26
Title
Elementor Pro < 2.0.10 - XSS
Slug
elementor-pro
Published
2020-05-07
Title
Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload
Slug
elementor-pro
Published
2023-03-28
Title
Elementor Pro < 3.11.7 - Subscriber+ Arbitrary Options Update
Slug
elementor-pro
Published
2024-02-26
Title
Elementor Pro < 3.19.3 - Authenticated (Contributor+) Information Exposure
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authententicated (Contributor+) Stored Cross-Site Scripting
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder – More than Just a Page Builder < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload