Advisories · Technology
elemntor Elementor Website Builder – more than just a page builder.
Every CVE that names elemntor Elementor Website Builder – more than just a page builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters
- elemntor Elementor Website Builder – more than just a page builder
- Broken access control
- CVSS 6.4 Medium
Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
- elemntor Elementor Website Builder – more than just a page builder
- Broken access control
- CVSS 6.4 Medium
Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 4.9 Medium
Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import
- elemntor Elementor Website Builder – more than just a page builder
- Path traversal
- CVSS 6.4 Medium
Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
- elemntor Elementor Website Builder – more than just a page builder
- Information disclosure
- CVSS 5.4 Medium
Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting
- elemntor Elementor Website Builder – more than just a page builder
- Cross-site scripting (XSS)