Threat Database

Threat Entry Updated 2026-10-12

Elementor - Security Vulnerability (CVE-2026-107866)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.3.

PLUGIN Elementor

CVE-2026-107866

MEDIUM CVSS 6.5 2026-10-12

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Elementor - Security Vulnerability (CVE-2026-95596)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.1.

PLUGIN Elementor

CVE-2026-95596

HIGH CVSS 7.1 2026-10-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-09

Elementor - Security Vulnerability (CVE-2026-62049)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor: from n/a through 1.5.2.1.

PLUGIN Elementor

CVE-2026-62049

MEDIUM CVSS 6.5 2026-10-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-07

Elementor - Security Vulnerability (CVE-2026-105875)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.6.2.

PLUGIN Elementor

CVE-2026-105875

MEDIUM CVSS 6.5 2026-10-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-07

Elementor - Security Vulnerability (CVE-2026-105873)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6.

PLUGIN Elementor

CVE-2026-105873

MEDIUM CVSS 6.5 2026-10-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-07

Elementor - Security Vulnerability (CVE-2026-105871)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6.

PLUGIN Elementor

CVE-2026-105871

MEDIUM CVSS 6.5 2026-10-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Elementor - Security Vulnerability (CVE-2026-39778)

Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes

PLUGIN Elementor

CVE-2026-39778

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Elementor - Security Vulnerability (CVE-2026-105879)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2.

PLUGIN Elementor

CVE-2026-105879

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-01

Elementor - Security Vulnerability (CVE-2026-103064)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6.

PLUGIN Elementor

CVE-2026-103064

MEDIUM CVSS 6.5 2026-10-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-01

Elementor - Security Vulnerability (CVE-2026-103063)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6.

PLUGIN Elementor

CVE-2026-103063

MEDIUM CVSS 6.5 2026-10-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-01

Elementor - Security Vulnerability (CVE-2026-103082)

Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.

PLUGIN Elementor

CVE-2026-103082

HIGH CVSS 7.2 2026-10-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-25

Elementor - Security Vulnerability (CVE-2026-62062)

Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1.

PLUGIN Elementor

CVE-2026-62062

HIGH CVSS 8.8 2026-09-25

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Elementor - Security Vulnerability (CVE-2026-62089)

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2.

PLUGIN Elementor

CVE-2026-62089

HIGH CVSS 7.1 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-08

Elementor - Cross-Site Scripting (XSS) (CVE-2026-84820)

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

PLUGIN Elementor

CVE-2026-84820

HIGH CVSS 7.1 2026-09-08

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-03

Elementor - Broken Access Control (CVE-2026-85304)

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.17.

PLUGIN Elementor

CVE-2026-85304

MEDIUM CVSS 5.3 2026-09-03

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-08-28

Elementor - Authentication Bypass (CVE-2026-81777)

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0.

PLUGIN Elementor

CVE-2026-81777

MEDIUM CVSS 5.3 2026-08-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-08-24

Elementor - Cross-Site Request Forgery (CSRF) (CVE-2026-28164)

Cross-Site Request Forgery (CSRF) vulnerability in HashThemes Easy Elementor Addons allows Cross Site Request Forgery. This issue affects Easy Elementor Addons: from n/a through 2.3.7.

PLUGIN Elementor

CVE-2026-28164

CRITICAL CVSS 9.6 2026-08-20

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-08-20

Elementor - SQL Injection (CVE-2026-66609)

Unauthenticated SQL Injection in TheGem (Elementor)

PLUGIN Elementor

CVE-2026-66609

CRITICAL CVSS 9.3 2026-08-20

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-08-20

Elementor - Arbitrary File Upload (CVE-2026-32475)

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

PLUGIN Elementor

CVE-2026-32475

CRITICAL CVSS 9.0 2026-08-19

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-08-20

Elementor - Cross-Site Scripting (XSS) (CVE-2026-73361)

Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor

PLUGIN Elementor

CVE-2026-73361

HIGH CVSS 7.1 2026-08-18

Risk Score

Open Full Technical Breakdown