IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de elemntor (CVE)

Registros CVE publicados para elemntor, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

Elementor Website Builder – more than just a page builder 17Ally – Web Accessibility & Usability 2Elementor Website Builder 1Hello Plus 1Image Optimizer – Compress Images and Convert to WebP or AVIF 1Site Mailer – SMTP Replacement, Email API Deliverability & Email Log 1Temporary Login 1Activity Log – Monitor & Record User Changes 1
25 resultados
4.3Media
CVE-2026-11905

Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.3 via the 'keys_conversion_map' parameter. This makes it possible for authenticated at…

9.8Crítica
CVE-2026-7567

Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover

elemntor Temporary Login

The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0. This is due to improper input validation in the maybe_login_temporary_user() function, which fails to verify that the 'temp-login-token' GET…

9.2%EPSS
4.3Media
CVE-2026-1206

Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exposure in all versions up to, and including, 3.35.7. This is due to a logic error in the is_allowed_to_read_template() function permission c…

7.2Alta
CVE-2025-1319

Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

elemntor Site Mailer – SMTP Replacement, Email API Deliverability & Email Log

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it po…

6.4Media
CVE-2024-10453

Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typography Settings in all versions up to, and including, 3.25.9 due to insufficient input sanitization and output…

6.4Media
CVE-2024-8236

Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter of the Icon widget in all versions up to, and including, 3.25.7 due to insufficient input sanitization and …

5.4Media
CVE-2024-5416

Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter of multiple widgets in all versions up to, and including, 3.23.4 due to insufficient input sanitization and o…

6.4Media
CVE-2024-4619

Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘hover_animation’ parameter in versions up to, and including, 3.21.5 due to insufficient input sanitization and o…

6.4Media
CVE-2024-2117

Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Path Widget in all versions up to, and including, 3.20.2 due to insufficient output escaping on user supplied attr…

6.4Media
CVE-2024-0506

Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $instance[alt] parameter in the get_image_alt function in all versions up to, and including, 3.18.3 due to insufficient …