Elementor Elementor Pro vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20261

Newest CVEs

• CVE-2026-32475

  WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

  Elementor · Elementor Pro

  Critical9.0
• CVE-2024-35656

  WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Elementor · Elementor Pro

  High7.1
• CVE-2023-35050

  WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability

  Elementor · Elementor Pro

  Medium5.4
• CVE-2024-23523

  WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability

  Elementor · Elementor Pro

  Medium6.5