Exposición de Elementor

Page builders, WordPress plugins
1045
score de exposición
899.310
sitios usan
0
en explotación
53
críticos

CVEs

1777 resultados
CVE-2024-10868MEDIUMEnter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post DisclosureEPSS 0.4%CVE-2024-39634HIGHWordPress PowerPack Pro for Elementor plugin <= 2.10.14 - Contributor+ Privilege Escalation vulnerabilityEPSS 0.4%CVE-2023-0280MEDIUMUltimate Carousel For Elementor <= 2.1.7 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-37479HIGHWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-28146MEDIUMWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2024-8482MEDIUMRoyal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member WidgetEPSS 0.4%CVE-2024-8546MEDIUMElementsKit Elementor addons <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video WidgetEPSS 0.4%CVE-2024-1500MEDIUMRoyal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo WidgetEPSS 0.4%CVE-2026-0825MEDIUMDatabase for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV ExportEPSS 0.4%CVE-2024-12116MEDIUMUnlimited Theme Addon For Elementor and WooCommerce <= 1.2.2 - Authenticated (Contributor+) Post DisclosureEPSS 0.4%CVE-2024-47361MEDIUMWordPress Elementor Addon Elements plugin <= 1.13.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-4624MEDIUMEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.20 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-2666MEDIUMPremium Addons for Elementor <= 4.10.24 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-54278MEDIUMWordPress News Ticker for Elementor plugin <= 2.1.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-3647MEDIUMPremium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style'EPSS 0.4%CVE-2024-8516MEDIUMThemesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information ExposureEPSS 0.4%CVE-2024-5614MEDIUMPiotnet Addons For Elementor <= 2.4.29 - Unauthenticated Sensitive Information ExposureEPSS 0.4%CVE-2024-33919MEDIUMWordPress RomethemeKit For Elementor plugin <= 1.4.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-33631MEDIUMWordPress Piotnet Addons For Elementor Pro plugin <= 7.1.17 - Authenticated Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%