Exposición de Elementor
Page builders, WordPress plugins1045
score de exposición
899.310
sitios usan
0
en explotación
53
críticos
CVEs
1777 resultadosCVE-2024-7092MEDIUMEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via no_more_items_text ParameterEPSS 0.4%CVE-2026-11390MEDIUMNews Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Site Logo Title and Single Author Box WidgetsEPSS 0.4%CVE-2024-10312MEDIUMExclusive Addons for Elementor <= 2.7.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor TemplatesEPSS 0.4%CVE-2024-2348MEDIUMGum Elementor Addon <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta WidgetEPSS 0.4%CVE-2026-11614MEDIUMXpro Addons <= 1.7.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'custom_attributes' Parameter of Multiple WidgetsEPSS 0.4%CVE-2024-2252MEDIUMDroit Elementor Addons – Widgets, Blocks, Templates Library For Elementor Builder <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-9682MEDIUMRoyal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder WidgetEPSS 0.4%CVE-2024-1507MEDIUMPrime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix WidgetEPSS 0.4%CVE-2024-1428MEDIUMElement Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box WidgetEPSS 0.4%CVE-2024-2503MEDIUMExclusive Addons for Elementor <= 2.6.9.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Post GridEPSS 0.4%CVE-2024-5189MEDIUMEssential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders <= 5.9.23 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-6626MEDIUMEleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing AuthorizationEPSS 0.4%CVE-2025-60084HIGHWordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-3668HIGHPowerPack Pro for Elementor <= 2.10.17 - Authenticated (Contributor+) Privilege EscalationEPSS 0.4%CVE-2026-84902MEDIUMKing Addons for Elementor < 51.1.81 - Contributor+ Stored XSS via Template Catalog ImportEPSS 0.4%CVE-2026-14817MEDIUMElement Pack Elementor Addons < 8.7.13 - Contributor+ DOM-Based Stored XSS via uikit Data AttributesEPSS 0.4%CVE-2026-85006MEDIUMHappy Addons for Elementor < 3.50.0 - Contributor+ Stored XSS via Creative Button WidgetEPSS 0.4%CVE-2026-19226MEDIUMRoyal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect SettingsEPSS 0.4%CVE-2026-83541MEDIUMSina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table WidgetEPSS 0.4%CVE-2026-84088MEDIUMXpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle WidgetEPSS 0.4%