Elementor Elementor Website Builder

• CVE-2026-120850 Medium 6.5 WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability –
• CVE-2026-109884 High 7.1 WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability –
• CVE-2026-62062 High 8.8 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2026-57619 Medium 6.5 WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability 0.4%
• CVE-2026-49782 Medium 5.4 WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability 0.2%
• CVE-2026-32445 Low 2.7 WordPress Elementor Website Builder plugin <= 3.35.5 - Broken Access Control vulnerability 0.2%
• CVE-2026-32352 Medium 6.5 WordPress Elementor Website Builder plugin <= 3.35.5 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-50555 Medium 6.5 WordPress Elementor Website Builder plugin <= 3.29.0 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-67588 Medium 4.3 WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability 0.2%
• CVE-2024-54444 Medium 6.5 WordPress Elementor plugin <= 3.25.10 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-37437 Medium 5.5 WordPress Elementor Website Builder plugin <= 3.22.1 - Arbitrary SVG File Download vulnerability 0.3%
• CVE-2023-33922 Medium 4.3 WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability 0.3%
• CVE-2024-24934 High 8.5 WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability 0.7%
• CVE-2023-47504 Medium 6.5 WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability 1.5%