Elementor.com vulnerabilities (CVE)

CVE records published for Elementor.com, newest first. Follow to get an email when a new one appears.

2 results

9.9Critical

CVE-2023-48777 2 years ago

WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

Elementor.com Elementor Website Builder; elementor website_builder

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.

4.1%EPSS

6.5Medium

CVE-2023-47505 2 years ago

WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)

Elementor.com Elementor

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elementor allows Cross-Site Scripting (XSS).This issue affects Elementor: from n/a through 3.16.4.

28%EPSS