IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al

elemntor güvenlik açıkları (CVE)

elemntor için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

Elementor Website Builder – more than just a page builder 17Ally – Web Accessibility & Usability 2Temporary Login 1Activity Log – Monitor & Record User Changes 1Elementor Website Builder 1Hello Plus 1Image Optimizer – Compress Images and Convert to WebP or AVIF 1Site Mailer – SMTP Replacement, Email API Deliverability & Email Log 1
25 sonuç
4.3Orta
CVE-2026-11905

Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.3 via the 'keys_conversion_map' parameter. This makes it possible for authenticated at…

4.3Orta
CVE-2026-1206

Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exposure in all versions up to, and including, 3.35.7. This is due to a logic error in the is_allowed_to_read_template() function permission c…

7.2Yüksek
CVE-2025-1319

Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

elemntor Site Mailer – SMTP Replacement, Email API Deliverability & Email Log

The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it po…

6.4Orta
CVE-2024-10453

Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typography Settings in all versions up to, and including, 3.25.9 due to insufficient input sanitization and output…

6.4Orta
CVE-2024-8236

Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter of the Icon widget in all versions up to, and including, 3.25.7 due to insufficient input sanitization and …

5.4Orta
CVE-2024-5416

Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the url parameter of multiple widgets in all versions up to, and including, 3.23.4 due to insufficient input sanitization and o…

6.4Orta
CVE-2024-4619

Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘hover_animation’ parameter in versions up to, and including, 3.21.5 due to insufficient input sanitization and o…

6.4Orta
CVE-2024-2117

Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Path Widget in all versions up to, and including, 3.20.2 due to insufficient output escaping on user supplied attr…

6.4Orta
CVE-2024-0506

Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt

elemntor Elementor Website Builder – more than just a page builder

The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $instance[alt] parameter in the get_image_alt function in all versions up to, and including, 3.18.3 due to insufficient …