İçeriğe atla
Noroxi

Elementor kayıtları

elementor üreticisine ait 54 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %1,9
Pre-auth RCE
0
Düzeltme kaydı olan
%20,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

54 kayıt
  • CVE-2022-1329
    63Bu hafta

    Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution

    YüksekCVSS 8,8SilahlaştırılmışEPSS %93

    elementor · website builder19 Nis 2022

  • CVE-2023-3124
    42Planlayın

    Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

    YüksekCVSS 8,8Kavram kanıtıEPSS %23

    elementor · elementor pro6 Haz 2023

  • CVE-2020-13126
    42Planlayın

    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE

    KritikCVSS 9,9Kavram kanıtıEPSS %9

    elementor · elementor page builder16 May 2020

  • CVE-2020-7055
    40Planlayın

    An issue was discovered in Elementor 2.7.4.

    KritikCVSS 9,9İstismar yokEPSS %3

    elementor · elementor page builder22 Nis 2020

  • CVE-2020-7109
    40Planlayın

    The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template.

    KritikCVSS 9,8İstismar yokEPSS %2

    elementor · website builder22 Oca 2020

  • CVE-2023-47504
    39İzleyin

    WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    elementor · website builder24 Nis 2024

  • CVE-2020-26596
    37İzleyin

    The Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authenticated users to execute arbitrary code

    YüksekCVSS 8,8İstismar yokEPSS %6

    elementor · elementor pro7 Eki 2020

  • CVE-2023-48777
    36İzleyin

    WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %4

    elementor · website builder26 Mar 2024

  • CVE-2017-18596
    35İzleyin

    The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.

    YüksekCVSS 8,8İstismar yokEPSS %1

    elementor · elementor page builder10 Eyl 2019

  • CVE-2023-0329
    34İzleyin

    Elementor Website Builder < 3.12.2 - Admin+ SQLi

    YüksekCVSS 7,2İstismar yokEPSS %20

    elementor · website builder30 May 2023

  • CVE-2021-24891
    32İzleyin

    Elementor < 3.4.8 - DOM Cross-Site-Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %25

    elementor · website builder23 Kas 2021

  • CVE-2024-24934
    32İzleyin

    WordPress Elementor plugin <= 3.19.0 - Arbitrary File Deletion and Phar Deserialization vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %1

    elementor · website builder17 May 2024

  • CVE-2022-29455
    31İzleyin

    WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %24

    elementor · website builder13 Haz 2022

  • CVE-2023-47505
    29İzleyin

    WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %25

    elementor · website builder30 Kas 2023

  • CVE-2025-1319
    28İzleyin

    Site Mailer <= 1.2.3 - Unauthenticated Stored Cross-Site Scripting

    YüksekCVSS 7,2İstismar yokEPSS %0

    elementor · site mailer28 Şub 2025

  • CVE-2020-20634
    26İzleyin

    Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature.

    OrtaCVSS 6,5İstismar yokEPSS %1

    elementor · website builder21 Ağu 2020

  • CVE-2024-8494
    26İzleyin

    Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode

    OrtaCVSS 6,5İstismar yokEPSS %0

    elementor · website builder30 Oca 2025

  • CVE-2022-4953
    25İzleyin

    Elementor < 3.5.5 - Iframe Injection

    OrtaCVSS 6,1Kavram kanıtıEPSS %3

    elementor · website builder14 Ağu 2023

  • CVE-2018-18379
    24İzleyin

    The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    elementor · elementor page builder7 Eki 2019

  • CVE-2020-36171
    24İzleyin

    The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads.

    OrtaCVSS 6,1İstismar yokEPSS %1

    elementor · website builder6 Oca 2021

  • CVE-2024-35656
    24İzleyin

    WordPress Elementor Pro <= 3.21.2 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    elementor · elementor pro22 Tem 2024

  • CVE-2020-8426
    21İzleyin

    The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page.

    OrtaCVSS 5,4İstismar yokEPSS %1

    elementor · website builder28 Oca 2020

  • CVE-2020-13864
    21İzleyin

    The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability.

    OrtaCVSS 5,4İstismar yokEPSS %1

    elementor · elementor page builder5 Haz 2020

  • CVE-2020-13865
    21İzleyin

    The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities.

    OrtaCVSS 5,4İstismar yokEPSS %1

    elementor · elementor page builder5 Haz 2020

  • CVE-2021-24205
    21İzleyin

    Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box Widget

    OrtaCVSS 5,4İstismar yokEPSS %1

    elementor · website builder5 Nis 2021