Known vulnerabilities in the Elementor plugin
405 security advisories have been published for the Elementor plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Elementor - Security Vulnerability (CVE-2026-39778) HIGH
- Elementor - Security Vulnerability (CVE-2026-105879) MEDIUM
- Elementor - Security Vulnerability (CVE-2026-103064) MEDIUM
- Elementor - Security Vulnerability (CVE-2026-103063) MEDIUM
- Elementor - Security Vulnerability (CVE-2026-103082) HIGH
- Elementor - Security Vulnerability (CVE-2026-62062) HIGH
- Elementor - Security Vulnerability (CVE-2026-62089) HIGH
- Elementor - Cross-Site Scripting (XSS) (CVE-2026-84820) HIGH
- Elementor - Broken Access Control (CVE-2026-85304) MEDIUM
- Elementor - Authentication Bypass (CVE-2026-81777) MEDIUM
- Elementor - Cross-Site Request Forgery (CSRF) (CVE-2026-28164) CRITICAL
- Elementor - SQL Injection (CVE-2026-66609) CRITICAL
- Elementor - Arbitrary File Upload (CVE-2026-32475) CRITICAL
- Elementor - Cross-Site Scripting (XSS) (CVE-2026-73361) HIGH
- Elementor - Server-Side Request Forgery (SSRF) (CVE-2026-32473) HIGH
- Elementor - Security Vulnerability (CVE-2026-65502) MEDIUM
- Elementor - Security Vulnerability (CVE-2026-28146) MEDIUM
- Elementor - Broken Access Control (CVE-2026-28147) MEDIUM
- Elementor - Information Disclosure (CVE-2026-17580) MEDIUM
- Elementor - Security Vulnerability (CVE-2026-1982) MEDIUM
- Elementor - Security Vulnerability (CVE-2026-66438) MEDIUM
- Elementor - Broken Access Control (CVE-2026-65433) MEDIUM
- Elementor - Cross-Site Scripting (XSS) (CVE-2026-59559) MEDIUM
- Elementor - Security Vulnerability (CVE-2026-65505) MEDIUM
- Elementor - Information Disclosure (CVE-2026-61976) MEDIUM
- Elementor - Path Traversal (CVE-2026-57804) HIGH
- Elementor - Cross-Site Scripting (XSS) (CVE-2026-57718) HIGH
- Elementor - Cross-Site Scripting (XSS) (CVE-2026-57376) HIGH
- Elementor - Information Disclosure (CVE-2026-59511) MEDIUM
- Elementor - Privilege Escalation (CVE-2026-56028) CRITICAL