Exposure of Elementor

Page builders, WordPress plugins
1,045
exposure score
899,310
sites use
0
exploited
53
critical

CVEs

1,777 results
CVE-2024-2655MEDIUMElementor Addons by Livemesh <= 8.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display NameEPSS 0.5%CVE-2024-0910MEDIUMRestrict for Elementor <= 1.0.7 - Protection Mechanism BypassEPSS 0.5%CVE-2024-5260MEDIUMSina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text ParameterEPSS 0.5%CVE-2024-2664MEDIUMPremium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-51856MEDIUMWordPress Moose Elementor Kit plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-2028MEDIUMExclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats WidgetEPSS 0.4%CVE-2024-2129MEDIUMWPBITS Addons For Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-3197MEDIUMThe Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom AttributesEPSS 0.4%CVE-2026-77150MEDIUMUnlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-33595MEDIUMWordPress Master Addons for Elementor plugin <= 2.0.5.4.1 - Broken Access Control on Duplicate Post vulnerabilityEPSS 0.4%CVE-2025-6327CRITICALWordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-10380HIGHAdvanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTIEPSS 0.4%CVE-2025-69382CRITICALWordPress Themesflat Elementor plugin <= 1.0.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-2623MEDIUMEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.11 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2025-2944MEDIUMJeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown WidgetsEPSS 0.4%CVE-2024-1276MEDIUMEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-4630MEDIUMStarter Templates — Elementor, WordPress & Beaver Builder Templates <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2023-48760HIGHWordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-68841HIGHWordPress TopperPack – Complete Elementor Addons, theme & CPT Builder plugin <= 1.2.1 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-67524HIGHWordPress Jobmonster Elementor Addon plugin <= 1.1.4 - Local File Inclusion vulnerabilityEPSS 0.4%