Login Request a demo
EL
Vendor
elemntor
8 products with CVEs on record
25
CVEs
0
On KEV
2
New 30D
Products
EW
Elementor Website Builder – more than just a page builder
elemntor
6.4
17 CVEs0 on KEV1 new
HP
Hello Plus
elemntor
5.4
1 CVEs0 on KEV1 new
AW
Ally – Web Accessibility & Usability
elemntor
7.5
2 CVEs0 on KEV0 new
AL
Activity Log – Monitor & Record User Changes
elemntor
7.2
1 CVEs0 on KEV0 new
EW
Elementor Website Builder
elemntor
8.8
1 CVEs0 on KEV0 new
IO
Image Optimizer – Compress Images and Convert to WebP or AVIF
elemntor
8.1
1 CVEs0 on KEV0 new
SM
Site Mailer – SMTP Replacement, Email API Deliverability & Email Log
elemntor
7.2
1 CVEs0 on KEV0 new
TL
Temporary Login
elemntor
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-11905
EW
Elementor Website Builder – more than just a page builder
elemntor
4.3
0%
Oct 15Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters
CVE-2026-5727
HP
Hello Plus
elemntor
5.4
0%
Oct 10Hello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation via hello_plus_set_as_entire_site
CVE-2026-5821
IO
Image Optimizer – Compress Images and Convert to WebP or AVIF
elemntor
8.1
1%
Jul 2Image Optimizer <= 1.7.4 - Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection
CVE-2026-7567
TL
Temporary Login
elemntor
9.8
9%
May 1Temporary Login <= 1.0.0 - Authentication Bypass to Account Takeover
CVE-2026-6127
EW
Elementor Website Builder – more than just a page builder
elemntor
6.4
0%
May 1Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
CVE-2025-14732
EW
Elementor Website Builder – more than just a page builder
elemntor
6.4
0%
Apr 8Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
CVE-2026-1206
EW
Elementor Website Builder – more than just a page builder
elemntor
4.3
0%
Mar 26Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
CVE-2026-2413
AW
Ally – Web Accessibility & Usability
elemntor
7.5
2%
Mar 11Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
CVE-2025-11220
EW
Elementor Website Builder – more than just a page builder
elemntor
6.4
0%
Dec 16Elementor <= 3.33.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Text Path
CVE-2025-10700
AW
Ally – Web Accessibility & Usability
elemntor
4.3
0%
Oct 16Ally - Web Accessibility & Usability <= 3.8.0 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2025-8081
EW
Elementor Website Builder – more than just a page builder
elemntor
4.9
1%
Aug 12Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import
CVE-2025-4566
EW
Elementor Website Builder – more than just a page builder
elemntor
6.4
0%
Jul 29Elementor <= 3.30.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Path Widget
CVE-2025-3075
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Jul 29Elementor <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1319
SM
Site Mailer – SMTP Replacement, Email API Deliverability & Email Log
elemntor
7.2
0%
Feb 28Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-13445
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Feb 20Elementor Website Builder – More Than Just a Page Builder <= 3.27.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-10453
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Dec 21Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings
CVE-2024-8236
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Nov 26Elementor Website Builder – More than Just a Page Builder <= 3.25.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-10788
AL
Activity Log – Monitor & Record User Changes
elemntor
7.2
1%
Nov 21Activity Log – Monitor & Record User Changes <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Context
CVE-2024-6757
EW
Elementor Website Builder – more than just a page builder
elemntor
4.3
0%
Oct 15Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
CVE-2024-5416
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Sep 11Elementor Website Builder – More than Just a Page Builder <= 3.23.4 - Authenticated (Contributor+) Stored Cross-Site Scripting in the URL Parameter in Multiple Widgets
CVE-2024-4619
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
May 21Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2024-2117
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Apr 9Elementor Website Builder – More than Just a Page Builder <= 3.20.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Path Widget
CVE-2024-0506
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Feb 20Elementor Website Builder – More than Just a Page Builder <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via get_image_alt
CVE-2020-36703
EW
Elementor Website Builder – more than just a page builder
elemntor
5.4
0%
Jun 7Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting
CVE-2022-1329
EW
Elementor Website Builder
elemntor
8.8
93%
Apr 19Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution