Medium
CVE-2025-22312
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2024-12624
Sina Extension for Elementor <= 3.5.91 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Sina Image Differ
Medium
CVE-2025-22316
WPBITS Addons For Elementor Page Builder <= 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-56282
WPMozo Addons Lite for Elementor <= 1.1.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-56285
WPBITS Addons For Elementor Page Builder <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22333
Piotnet Addons For Elementor <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22323
Image Hover Effects for Elementor <= 1.0.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56275
Envato Elements <= 2.0.14 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2025-22321
ElementsCSS Addons for Elementor <= 1.0.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56260
ShopElement <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56241
WPKoi Templates for Elementor <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56254
Move Addons for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24624
HT Event <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-56268
Post Grid Elementor Addon <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56252
Enter Addons <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13865
S3Player – WooCommerce & Elementor Integration <= 4.2.1 - Reflected Cross-Site Scripting
High
CVE-2024-12272
WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-11230
Elementor Header & Footer Builder <= 1.6.46 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title Widget
Medium
CVE-2024-11852
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
Medium
CVE-2024-10453
Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings
Medium
CVE-2024-10797
Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-56231
SaasPricing <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56227
Royal Elementor Addons <= 1.7.1001 - Missing Authorization
Medium
CVE-2024-56221
WPMozo Addons Lite for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.