WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elementor
Published
2026-04-07
Title
Elementor Website Builder < 3.35.6 - Contributor+ Stored XSS via REST API
Slug
elementor
Published
2026-03-07
Title
Elementor Website Builder < 3.35.6 - Missing Authorization
Slug
elementor
Published
2026-02-13
Title
Elementor Website Builder < 3.35.6 - Contributor+ Stored XSS
Slug
elementor
Published
2026-04-30
Title
Elementor Website Builder < 4.0.5 - Contributor+ Stored XSS via REST API
Slug
elementor
Published
2026-06-02
Title
Elementor Website Builder < 4.1.1 - Missing Authorization
Slug
elementor
Published
2026-06-29
Title
Elementor < 4.1.4 - Contributor+ Sensitive Information Disclosure via REST API
Slug
elementor
Published
2026-06-25
Title
Elementor < 4.1.4 - Contributor+ Sensitive Data Exposure via elementor-template Shortcode
Slug
elementor-pro
Published
2018-10-26
Title
Elementor Pro < 2.0.10 - XSS
Slug
elementor-pro
Published
2020-05-07
Title
Elementor Pro < 2.9.4 - Authenticated Arbitrary File Upload
Slug
elementor-pro
Published
2023-03-28
Title
Elementor Pro < 3.11.7 - Subscriber+ Arbitrary Options Update
Slug
elementor-pro
Published
2024-02-26
Title
Elementor Pro < 3.19.3 - Authenticated (Contributor+) Information Exposure
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authententicated (Contributor+) Stored Cross-Site Scripting
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder – More than Just a Page Builder < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation
Slug
elementor-pro
Published
2024-03-26
Title
Elementor Website Builder Pro < 3.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload
Slug
elementor-pro
Published
2024-05-02
Title
Elementor Website Builder Pro < 3.21.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
elementor-pro
Published
2024-06-28
Title
Elementor Pro < 3.21.3 - Reflected Cross-Site Scripting
Slug
elementor-pro
Published
2025-01-29
Title
Elementor Website Builder Pro – More than Just a Page Builder < 3.25.11 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Slug
elementor-pro
Published
2025-06-09
Title
Elementor Pro < 3.29.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
elementor-pro
Published
2025-06-19
Title
Elementor Website Builder < 3.29.1 - Contributor+ Stored XSS
Slug
elementor_widget_clever_radio_player
Published
2025-04-18
Title
CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon < 2.5 - Unauthenticated Arbitrary File Read
Slug
elementor_widget_universal_video_player
Published
2025-06-03
Title
Universal Video Player <= 1.4.0 - Reflected Cross-Site Scripting
Slug
elements-for-lifterlms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
elements-for-lifterlms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting