Elementor vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20248
3. 20253
4. 202612

Newest CVEs

• CVE-2026-109883

  WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

  Elementor · Elementor Website Builder

  High7.1
• CVE-2026-109884

  WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

  Elementor · Elementor Website Builder

  High7.1
• CVE-2026-62062

  WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability

  Elementor · Elementor Website Builder

  High8.8
• CVE-2026-84759

  WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability

  Elementor · Activity Log

  High7.1
• CVE-2026-32475

  WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

  Elementor · Elementor Pro

  Critical9.0
• CVE-2026-57619

  WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability

  Elementor · Elementor Website Builder

  Medium6.5
• CVE-2026-49782

  WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability

  Elementor · Elementor Website Builder

  Medium5.4
• CVE-2026-32445

  WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability

  Elementor · Elementor Website Builder

  Low2.7
• CVE-2026-32352

  WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability

  Elementor · Elementor Website Builder

  Medium6.5
• CVE-2024-50555

  WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability

  Elementor · Elementor Website Builder

  Medium6.5