Elementor pro
This hub aggregates every CVE we track for Elementor pro, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
10
CVEs tracked
1
Critical
3
High
0
In CISA KEV
Severity distribution
MEDIUM6HIGH3CRITICAL1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
2024-092026-08
Latest CVEs
The 10 most recently published vulnerabilities affecting Elementor pro.
- CVE-2026-32475WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability9.0
- CVE-2024-35656WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2023-35050WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability5.4
- CVE-2024-1521Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload6.4
- CVE-2024-2781Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag6.4
- CVE-2024-2121Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting5.4
- CVE-2024-1364Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting6.4
- CVE-2024-23523WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability6.5
- CVE-2023-3124Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option8.8
- CVE-2020-26596The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code because only the Editor role is needed to upload executab...8.8
Product normalization is registry-driven with AI assist and human review. How it works