Known vulnerabilities in Elementor Page Builder

Software CPE: cpe:2.3:a:kingyes:elementor:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 10
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Elementor Page Builder Elementor Page Builder is affected by 10 known vulnerabilities: 2 high, 8 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100930 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-8236
CWE-79 Low
No
No
3.25.8 26.11.2024 SB2024112644
#VU99244 - Exposure of sensitive information to an unauthorized actor
CVE-2024-6757
CWE-200 Low
No
No
3.24.6 22.10.2024 SB20241022358
#VU65734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29455
CWE-79 Low
Available
No
3.5.6 24.07.2022 SB2022072401
#VU62506 - Improper Access Control
CVE-2022-1329
CWE-284 High
Available
No
3.6.3 22.04.2022 SB2022042225
#VU28776 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13865
CWE-79 Low
No
No
2.9.9 08.06.2020 SB2020060806
#VU28775 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13864
CWE-79 Low
No
No
2.9.10 08.06.2020 SB2020060805
#VU27560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.9.8 06.05.2020 SB2020050605
#VU26471 - Permissions, Privileges, and Access Controls
CWE-264 High
No
No
2.9.6 31.03.2020 SB2020033109
#VU24755 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.7.6 30.01.2020 SB2020013001
#VU24723 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8426
CWE-79 Low
No
No
2.8.5 29.01.2020 SB2020012906