Product by Elementor
Elementor Pro
10 known vulnerabilities in Elementor Pro (Elementor), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-3124 | Elementor Pro <= 3.11.6 - Authenticated (Subscriber+) Privilege Escalation via update_page_option | 8.8 | |
| Critical | CVE-2026-32475 | WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability | 9.0 | |
| High | CVE-2020-26596 | Elementor Pro: Code Execution | 8.8 | |
| Medium | CVE-2024-23523 | Elementor Pro: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| High | CVE-2024-35656 | WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2024-1521 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2781 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1364 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2121 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | 5.4 | |
| Medium | CVE-2023-35050 | Elementor Pro: Missing Authorization | 5.4 |