elemntor
- Total products in the ecosystem
- 8
- Total vulnerabilities (90 days)
- 2
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/25/2026, elemntor recorded 2 security vulnerabilities in the last 90 days across 2 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Elementor Website Builder – more than just a page builder had the most security vulnerabilities in the elemntor ecosystem, with 1 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-11905Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersCVE-2026-5727Hello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation via hello_plus_set_as_entire_siteCVE-2026-5821Image Optimizer <= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field InjectionCVE-2026-7567Temporary Login <= 1.0.0 - Authentication Bypass to Account TakeoverCVE-2026-6127Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API25 Results | Page 1 of 3
| SeverityMedium |
| SeverityHigh |
| SeverityCritical |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |