Exposición de Elementor

Page builders, WordPress plugins
1045
score de exposición
899.310
sitios usan
0
en explotación
53
críticos

CVEs

1777 resultados
CVE-2021-24351—The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)EPSS 2.5%CVE-2021-24358—The Plus Addons for Elementor Page Builder < 4.1.10 - Open RedirectEPSS 2.3%CVE-2026-32475CRITICALWordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerabilityEPSS 2.0%CVE-2022-0320—Essential Addons for Elementor < 5.0.5 - Unauthenticated LFIEPSS 2.0%CVE-2021-24948—The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data DisclosureEPSS 1.9%CVE-2021-24949—The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL InjectionEPSS 1.8%CVE-2024-2662HIGHUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command InjectionEPSS 1.7%CVE-2022-3805HIGHJeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization BypassEPSS 1.7%CVE-2024-1234MEDIUMExclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 1.6%CVE-2024-4346CRITICALStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File DeletionEPSS 1.5%CVE-2021-4330HIGHEnvato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.5%CVE-2024-2047HIGHElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_rawEPSS 1.5%CVE-2025-47492HIGHWordPress Drag and Drop File Upload for Elementor Forms plugin <= 1.4.3 - Arbitrary File Deletion VulnerabilityEPSS 1.5%CVE-2024-4345CRITICALStartklar Elementor Addons <= 1.7.13 - Unauthenticated Arbitrary File UploadEPSS 1.5%CVE-2023-47504MEDIUMWordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerabilityEPSS 1.5%CVE-2022-4950HIGHCool Plugins (Various Versions) - Arbitrary Plugin Installation and ActivationEPSS 1.4%CVE-2024-11600HIGHBorderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg <= 1.6.0 - Authenticated (Administrator+) Remote Code ExecutionEPSS 1.3%CVE-2025-7384CRITICALDatabase for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File DeletionEPSS 1.3%CVE-2026-18438HIGHTemplately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename MismatchEPSS 1.3%CVE-2023-3295HIGHUnlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File UploadEPSS 1.3%