Critical
CVE-2026-32475
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filters
Critical
CVE-2026-28192
Piotnet Addons For Elementor Pro <= 7.1.67 - Unauthenticated Arbitrary File Upload
Critical
CVE-2026-4885
Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload
Critical
CVE-2026-27983
LMS Elementor Pro <= 1.0.4 - Unauthenticated Privilege Escalation
Medium
CVE-2024-50555
Elementor Website Builder <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3076
Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31046
AnyWhere Elementor Pro <= 2.29 - Missing Authorization
High
CVE-2025-1639
Animation Addons for Elementor Pro <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Medium
CVE-2024-8494
Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Medium
CVE-2024-35656
Elementor Pro <= 3.21.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-4107
Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-33632
Piotnet Addons For Elementor Pro <= 7.1.17 - Cross-Site Request Forgery
Medium
CVE-2024-33631
Piotnet Addons For Elementor Pro <= 7.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33633
Piotnet Addons For Elementor Pro <= 7.1.17 - Reflected Cross-Site Scripting
High
CVE-2024-33634
Piotnet Addons For Elementor Pro <= 7.1.17 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-33635
Piotnet Addons For Elementor Pro <= 7.1.17 - Missing Authorization to Arbitrary Post/Page Deletion
Medium
CVE-2024-1521
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload
Medium
CVE-2024-2120
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation
Medium
CVE-2024-2121
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2781
Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag
Medium
CVE-2024-1364
Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-23523
Elementor Pro <= 3.19.2 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2023-35050
Elementor Pro <= 3.13.0 - Missing Authorization
High
CVE-2023-3124
Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.