| CVE-2026-81812 |
The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route,…
|
6.4
Medium
|
Oct 21, 2026 |
| CVE-2026-81813 |
The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking…
|
6.8
Medium
|
Oct 21, 2026 |
| CVE-2026-8825 |
The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning…
|
4.9
Medium
|
Jul 20, 2026 |
| CVE-2022-4953 |
The Elementor Website Builder WordPress plugin before 3.5.5 does not filter out user-controlled URLs from being loaded…
|
Not rated
|
Aug 14, 2023 |
| CVE-2023-0329 |
The Elementor Website Builder WordPress plugin before 3.12.2 does not properly sanitize and escape the Replace URL…
|
7.2
High
|
May 30, 2023 |
| CVE-2021-24891 |
The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM…
|
Not rated
|
Nov 23, 2021 |
| CVE-2021-24206 |
In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php)…
|
Not rated
|
Apr 5, 2021 |
| CVE-2021-24205 |
In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget (includes/widgets/icon-box.php)…
|
Not rated
|
Apr 5, 2021 |
| CVE-2021-24204 |
In the Elementor Website Builder WordPress plugin before 3.1.4, the accordion widget (includes/widgets/accordion.php)…
|
Not rated
|
Apr 5, 2021 |
| CVE-2021-24203 |
In the Elementor Website Builder WordPress plugin before 3.1.4, the divider widget (includes/widgets/divider.php)…
|
Not rated
|
Apr 5, 2021 |
| CVE-2021-24202 |
In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php)…
|
Not rated
|
Apr 5, 2021 |
| CVE-2021-24201 |
In the Elementor Website Builder WordPress plugin before 3.1.4, the column element (includes/elements/column.php)…
|
Not rated
|
Apr 5, 2021 |