elementor
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 93 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 10, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Critical Elementor Pro bug exposes WordPress sites to RCE attacks
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
ECS < 4.3.8 - Contributor+ Stored XSS via Dynamic Repeater Bindings
Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes
Elementor < 4.1.4 - Contributor+ Sensitive Information Disclosure via REST API
Animation Addons for Elementor <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Weather Widget
WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability
Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API
Elementor Website Builder <= 3.35.7 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Elementor Template
Monitor elementor in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.