WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget
Slug
elementor
Published
2021-03-17
Title
Elementor < 3.1.4 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget
Slug
elementor
Published
2021-03-24
Title
Elementor < 3.4.8 - DOM Cross-Site-Scripting
Slug
elementor
Published
2022-04-13
Title
Elementor 3.6.0-3.6.2 - Subscriber+ Arbitrary File Upload
Slug
elementor
Published
2022-06-13
Title
Elementor < 3.5.6 - DOM Reflected Cross-Site Scripting
Slug
elementor
Published
2023-05-02
Title
Elementor Website Builder < 3.12.2 - Admin+ SQLi
Slug
elementor
Published
2023-05-12
Title
Elementor Website Builder < 3.13.2 - Missing Authorization
Slug
elementor
Published
2023-07-19
Title
Elementor < 3.5.5 - Iframe Injection
Slug
elementor
Published
2023-11-08
Title
Elementor Website Builder < 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_inline_svg()
Slug
elementor
Published
2023-11-08
Title
Elementor Website Builder < 3.16.5 - Missing Authorization to Arbitrary Attachment Read
Slug
elementor
Published
2023-12-06
Title
Elementor < 3.18.2 - Contributor+ Arbitrary File Upload to RCE via Template Import
Slug
elementor
Published
2024-02-07
Title
Elementor < 3.19.1 - Authenticated(Contributor+) Arbitrary File Deletion and PHAR Deserialization
Slug
elementor
Published
2024-02-07
Title
Elementor Website Builder – More than Just a Page Builder < 3.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt
Slug
elementor
Published
2024-03-26
Title
Elementor Website Builder < 3.20.3 - Contributor+ DOM Stored XSS
Slug
elementor
Published
2024-05-20
Title
Elementor Website Builder < 3.21.6 - Contributor+ DOM Stored XSS
Slug
elementor
Published
2024-06-28
Title
Elementor Website Builder < 3.22.2 - Contributor+ Arbitrary SVG Download
Slug
elementor
Published
2024-09-10
Title
Elementor Website Builder – More than Just a Page Builder < 3.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets
Slug
elementor
Published
2024-10-14
Title
Elementor < 3.24.6 - Contributor+ Information Exposure via get_image_alt
Slug
elementor
Published
2024-11-25
Title
Elementor Website Builder < 3.25.8 - Contributor+ Stored XSS
Slug
elementor
Published
2024-12-20
Title
Elementor Website Builder < 3.25.10 - Contributor+ Stored XSS via Typography Settings
Slug
elementor
Published
2025-02-19
Title
Elementor Website Builder < 3.27.5 - Contributor+ Stored XSS