Product by Https://elementor.com/
Elementor Website Builder Pro
9 known vulnerabilities in Elementor Website Builder Pro (Https://elementor.com/), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-3124 | Elementor Pro <= 3.11.6 - Authenticated (Subscriber+) Privilege Escalation via update_page_option | 8.8 | |
| Medium | CVE-2024-4107 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 6.4 | |
| Medium | CVE-2025-3076 | Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2024-1364 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-1521 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2781 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-2121 | Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | 5.4 | |
| Medium | CVE-2024-2120 | Https://elementor.com/ Elementor Website Builder Pro: Cross-site Scripting | 5.4 | |
| Medium | CVE-2024-8494 | Https://elementor.com/ Elementor Website Builder Pro: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 |