Vulnerabilities in elemntor
25 resultsCVE-2025-11220MEDIUMElementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text PathEPSS 0.2%CVE-2026-5727MEDIUMHello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation via hello_plus_set_as_entire_siteEPSS 0.2%CVE-2026-6127MEDIUMElementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST APIEPSS 0.2%CVE-2025-10700MEDIUMAlly - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings UpdateEPSS 0.2%CVE-2025-3075MEDIUMElementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%