What’s Vulnerable › Products

https://elementor.com/ Elementor Website Builder Pro vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your https://elementor.com/ Elementor Website Builder Pro version is affected

Latest https://elementor.com/ Elementor Website Builder Pro vulnerabilities

• CVE-2026-32475 — WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability (CVSS 9.0)
• CVE-2024-35656 — WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2023-35050 — WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability (CVSS 5.4)
• CVE-2024-2781 — Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag (CVSS 5.4)
• CVE-2024-2121 — Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-1521 — Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload (CVSS 5.4)
• CVE-2024-1364 — Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-23523 — WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability (CVSS 6.5)
• CVE-2023-3124 — Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option (CVSS 8.8)
• CVE-2020-26596 — (CVSS 8.8)