Elementor

Elementor Page Builder

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-3076

  • EPSS 0.04%
  • Veröffentlicht 10.06.2025 04:23:09
  • Zuletzt bearbeitet 11.07.2025 17:03:28

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all versions up to, and including, 3.29.0 due to insufficient input sanitization and output escaping. This makes it...

5.4

CVE-2020-20406

  • EPSS 0.25%
  • Veröffentlicht 16.09.2020 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:12:03

A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom attributes.

5.4

CVE-2020-13864

Exploit
  • EPSS 0.16%
  • Veröffentlicht 05.06.2020 22:15:12
  • Zuletzt bearbeitet 21.11.2024 05:02:01

The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability. An author user can create posts that result in a stored XSS by using a crafted payload in custom links.

5.4

CVE-2020-13865

Exploit
  • EPSS 0.16%
  • Veröffentlicht 05.06.2020 22:15:12
  • Zuletzt bearbeitet 21.11.2024 05:02:02

The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities. An author user can create posts that result in stored XSS vulnerabilities, by using a crafted link in the custom URL or by applying custom ...

9.9

CVE-2020-13126

  • EPSS 69.38%
  • Veröffentlicht 17.05.2020 01:15:11
  • Zuletzt bearbeitet 21.11.2024 05:00:42

An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code...

9.9

CVE-2020-7055

Exploit
  • EPSS 2.07%
  • Veröffentlicht 22.04.2020 18:15:11
  • Zuletzt bearbeitet 21.11.2024 05:36:34

An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.

6.1

CVE-2018-18379

  • EPSS 0.51%
  • Veröffentlicht 07.10.2019 12:15:10
  • Zuletzt bearbeitet 21.11.2024 03:55:49

The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS.

8.8

CVE-2017-18596

  • EPSS 0.55%
  • Veröffentlicht 10.09.2019 11:15:10
  • Zuletzt bearbeitet 21.11.2024 03:20:29

The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions.