en
Elementor Pro is a paid WordPress plugin from Elementor that extends the free Elementor Core plugin with professional website-building tools. It provides visual editing, theme building, forms, popups, dynamic content, and e-commerce capabilities for WordPress websites.
Official website · elementor.comSeverity across 4 analyzed records
As of 09/18/2026, within CyStack's analyzed data, Elementor Pro has 1 security vulnerability published in the last 90 days. Of these, 1 is rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Elementor Pro and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-32475WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability | Exploitation statusNot known exploited | FixYes | Published08/19/2026 | SeverityCritical |
CVE-2024-35656WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot known exploited | FixYes | Published07/22/2024 | SeverityHigh |
CVE-2023-35050WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability | Exploitation statusNot known exploited | FixYes | Published06/19/2024 | SeverityMedium |
CVE-2024-23523WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability | Exploitation statusNot known exploited | FixYes | Published03/16/2024 | SeverityMedium |
