Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Elementor Website Builder — Vulnerabilities & Security Advisories 23

All 23 CVE vulnerabilities found in Elementor Website Builder, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Elementor Website Builder, a popular WordPress page-building plugin. The collection focuses on security weaknesses affecting the product, covering advisories published over the last five years. Readers can track the vendor’s published security notices, analyze specific weakness classes such as cross-site scripting or SQL injection, and review the full vulnerability history for this WordPress extension.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-62062 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 8.8 High 2026-09-25
CVE-2026-8825 Elementor < 4.1.4 - Contributor+ Sensitive Information Disclosure via REST API - - 2026-07-20
CVE-2026-57619 WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability CWE-862 6.5 Medium 2026-06-25
CVE-2026-49782 WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability CWE-862 5.4 Medium 2026-06-02
CVE-2026-32445 WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability CWE-862 2.7 Low 2026-03-13
CVE-2026-32352 WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-03-13
CVE-2024-50555 WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-02-20
CVE-2025-67588 WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability CWE-862 4.3 Medium 2025-12-09
CVE-2024-54444 WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2025-02-25
CVE-2024-37437 WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability CWE-79 5.5 Medium 2024-07-09
CVE-2023-33922 WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-06-11
CVE-2024-24934 WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability CWE-22 8.5 High 2024-05-17
CVE-2023-47504 WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability CWE-287 6.5 Medium 2024-04-24
CVE-2023-48777 WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability CWE-434 9.9 Critical 2024-03-26
CVE-2022-4953 Elementor < 3.5.5 - Iframe Injection 6.1 - 2023-08-14
CVE-2023-0329 Elementor Website Builder < 3.12.2 - Admin+ SQLi 7.2 - 2023-05-30
CVE-2021-24891 Elementor < 3.4.8 - DOM Cross-Site-Scripting CWE-79 6.1 - 2021-11-23
CVE-2021-24201 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column Element CWE-79 5.4 - 2021-04-05
CVE-2021-24206 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box Widget CWE-79 5.4 - 2021-04-05
CVE-2021-24205 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget CWE-79 5.4 - 2021-04-05
CVE-2021-24204 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion Widget CWE-79 5.4 - 2021-04-05
CVE-2021-24203 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider Widget CWE-79 5.4 - 2021-04-05
CVE-2021-24202 Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading Widget CWE-79 5.4 - 2021-04-05

All 23 known CVE vulnerabilities affecting Elementor Website Builder with full Chinese analysis, references, and POCs where available.