Product by Elementor

    Elementor Website Builder Pro

    8 known vulnerabilities in Elementor Website Builder Pro (Elementor), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Elementor Website Builder Pro (Elementor)
    CriticalCVE-2020-13126

    Elementor Website Builder Pro: Remote Code Execution

    		9.9
    CriticalCVE-2020-7055

    Elementor Website Builder Pro: Unrestricted File Upload

    		9.9
    HighCVE-2017-18596

    Elementor Website Builder Pro: Improper Access Control

    		8.8
    MediumCVE-2018-18379

    Elementor Website Builder Pro: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2020-13865

    Elementor Website Builder Pro: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2020-13864

    Elementor Website Builder Pro: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2020-20406

    Elementor Website Builder Pro: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2025-3076

    Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4

    All products by Elementor