CVE-2026-84759WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product A Activity Log Published 09/02/2026 Severity High CVE-2026-32475WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Pro Published 08/19/2026 Severity Critical CVE-2026-57619WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 06/25/2026 Severity Medium CVE-2026-49782WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 06/02/2026 Severity Medium CVE-2026-32445WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 03/13/2026 Severity Low CVE-2026-32352WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 03/13/2026 Severity Medium CVE-2024-50555WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 02/20/2026 Severity Medium CVE-2026-25387WordPress Image Optimizer by Elementor plugin <= 1.7.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product I Image Optimizer by Elementor Published 02/19/2026 Severity Medium CVE-2026-25386WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product A Ally Published 02/19/2026 Severity Medium CVE-2025-67588WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 12/09/2025 Severity Medium CVE-2025-8081Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 08/12/2025 Severity Medium CVE-2025-3075Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 07/29/2025 Severity Medium CVE-2025-3076Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 06/10/2025 Severity Medium CVE-2025-32640WordPress One Click Accessibility plugin <= 3.1.0 - Cross-Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Ally Published 04/09/2025 Severity Medium CVE-2025-1319Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product S Site Mailer – SMTP Replacement, Email API Deliverability & Email Log Published 02/28/2025 Severity High CVE-2024-54444WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 02/25/2025 Severity Medium CVE-2024-13445Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 02/20/2025 Severity Medium CVE-2024-8494Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 01/30/2025 Severity Medium CVE-2024-10453Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 12/21/2024 Severity Medium CVE-2024-8236Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 11/26/2024 Severity Medium CVE-2024-6757Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 10/15/2024 Severity Medium CVE-2024-5416Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 09/11/2024 Severity Medium CVE-2024-35656WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Pro Published 07/22/2024 Severity High CVE-2024-37437WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 07/09/2024 Severity Medium CVE-2023-35050WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Pro Published 06/19/2024 Severity Medium CVE-2023-33922WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 06/11/2024 Severity Medium CVE-2024-4619Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 05/21/2024 Severity Medium CVE-2024-24934WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 05/17/2024 Severity High CVE-2024-4107Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 05/09/2024 Severity Medium CVE-2023-47504WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 04/24/2024 Severity Medium CVE-2024-31289WordPress Hello Elementor theme <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product H Hello Elementor Published 04/12/2024 Severity Medium CVE-2024-2117Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 04/09/2024 Severity Medium CVE-2024-1521Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 03/27/2024 Severity Medium CVE-2024-2120Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 03/27/2024 Severity Medium CVE-2024-2121Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 03/27/2024 Severity Medium CVE-2024-2781Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 03/27/2024 Severity Medium CVE-2024-1364Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 03/27/2024 Severity Medium CVE-2023-48777WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 03/26/2024 Severity Critical CVE-2024-23523WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Pro Published 03/16/2024 Severity Medium CVE-2024-0506Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 02/20/2024 Severity Medium CVE-2023-47505WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product E Elementor Published 11/30/2023 Severity Medium CVE-2023-47177WordPress Linker Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product L Linker Published 11/06/2023 Severity Medium CVE-2022-4953Elementor < 3.5.5 - Iframe Injection Exploitation status Public exploit Fix Affected product E Elementor Website Builder Published 08/14/2023 Severity Unknown CVE-2023-3124Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Pro Published 06/07/2023 Severity High CVE-2020-36703Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product E Elementor Website Builder – more than just a page builder Published 06/07/2023 Severity Medium CVE-2023-0329Elementor Website Builder < 3.12.2 - Admin+ SQLi Exploitation status Public exploit Fix Affected product E Elementor Website Builder Published 05/30/2023 Severity High CVE-2022-29455WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product E Elementor Website Builder (WordPress plugin) Published 06/13/2022 Severity Medium CVE-2022-1329Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution Exploitation status Not known exploited Fix Affected product E Elementor Website Builder Published 04/19/2022 Severity High CVE-2021-24891Elementor < 3.4.8 - DOM Cross-Site-Scripting Exploitation status Not confirmed Fix Affected product E Elementor Website Builder Published 11/23/2021 Severity Unknown CVE-2021-24204Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget Exploitation status Not confirmed Fix Affected product E Elementor Website Builder Published 04/05/2021 Severity Unknown CVE-2021-24202Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget Exploitation status Not confirmed Fix Affected product E Elementor Website Builder Published 04/05/2021 Severity Unknown CVE-2021-24206Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget Exploitation status Not confirmed Fix Affected product E Elementor Website Builder Published 04/05/2021 Severity Unknown CVE-2021-24203Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget Exploitation status Not confirmed Fix Affected product E Elementor Website Builder Published 04/05/2021 Severity Unknown CVE-2021-24205Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget Exploitation status Not confirmed Fix Affected product E Elementor Website Builder Published 04/05/2021 Severity Unknown CVE-2021-24201Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element Exploitation status Not confirmed Fix Affected product E Elementor Website Builder Published 04/05/2021 Severity Unknown CVE-2020-36171Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/06/2021 Severity Unknown CVE-2020-26596Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 10/07/2020 Severity Unknown CVE-2020-20406Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 09/16/2020 Severity Unknown CVE-2020-15020Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 08/31/2020 Severity Unknown CVE-2020-20634Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 08/21/2020 Severity Unknown CVE-2020-13865Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 06/05/2020 Severity Unknown CVE-2020-13864Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 06/05/2020 Severity Unknown CVE-2020-13126Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 05/17/2020 Severity Critical CVE-2020-7055Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 04/22/2020 Severity Unknown CVE-2020-8426Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/28/2020 Severity Unknown CVE-2020-7109Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/22/2020 Severity Unknown CVE-2018-18379Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 10/07/2019 Severity Unknown CVE-2017-18596Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 09/10/2019 Severity Unknown 
.svg){kind=icon}
