Elementor Pro vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

EP

Product

Elementor Pro

by Elementor · last CVE Aug 19, 2026

10

CVEs

0

On KEV

9.0

Max CVSS

0

New 30D

Vulnerabilities10 In the news2 Timeline

Severity mix

Critical 1High 2Medium 7Low 0

Severity

All severities10 Critical1 High2 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Elementor Pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-23523	6.5	1%	Mar 16	WordPress Elementor Pro plugin <= 3.19.2 - Contributor+ Arbitrary User Meta Data Retrieval vulnerability Affected: through 3.19.2
CVE-2024-35656	6.1	0%	Jul 22	WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 3.21.2
CVE-2023-35050	5.4	0%	Jun 19	WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability Affected: through 3.13.0
CVE-2024-1521	5.4	0%	Mar 27	Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload Affected: before 3.20.2
CVE-2024-2121	5.4	0%	Mar 27	Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 3.20.2
CVE-2024-2781	5.4	0%	Mar 27	Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag Affected: before 3.20.2
CVE-2024-1364	5.4	0%	Mar 27	Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting Affected: before 3.20.2