Pricing
Case studies
Login
Start trial
Elementor Pro
Elementor
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
13 fixed
4 Mitigation rules
Cross Site Scripting (XSS) vulnerability
<= 3.29.0
Jun 19, 2025
Authenticated (Contributor+) Sensitive Information Exposure via Shortcode vulnerability
<= 3.25.10
Jan 30, 2025
Reflected Cross Site Scripting (XSS) vulnerability
<= 3.21.2
Jun 28, 2024
Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting vulnerability
<= 3.21.0
May 3, 2024
Auth. Stored Cross-Site Scripting (XSS) vulnerability
<= 3.20.1
Mar 26, 2024
Auth. Stored Cross-Site Scripting (XSS) vulnerability
<= 3.20.1
Mar 26, 2024
Auth. DOM-Based Stored Cross-Site Scripting (XSS) vulnerability
<= 3.20.1
Mar 26, 2024
Auth. Stored Cross-Site Scripting (XSS) vulnerability
<= 3.20.1
Mar 26, 2024
Auth. Stored Cross-Site Scripting (XSS) vulnerability
<= 3.20.1
Mar 26, 2024
Contributor+ Arbitrary User Meta Data Retrieval vulnerability
<= 3.19.2
Feb 26, 2024
Auth. Broken Access Control vulnerability
<= 3.13.0
Jun 20, 2023
Authenticated Arbitrary Options Change vulnerability
<= 3.11.6
Mar 28, 2023
Authenticated Arbitrary File Upload vulnerability
<= 2.9.3
May 6, 2020