Known Vulnerabilities for Website Builder by Elementor
Listed below are 10 of the newest known vulnerabilities associated with "Website Builder" by "Elementor".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-32445 json | Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured... | Not Provided | 2026-03-13 | 2026-04-01 |
| CVE-2026-32352 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Web... | Not Provided | 2026-03-13 | 2026-04-01 |
| CVE-2026-6127 json | The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta ... | Not Provided | 2026-05-01 | 2026-05-01 |
| CVE-2026-2481 json | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scr... | Not Provided | 2026-04-08 | 2026-04-08 |
| CVE-2026-2442 json | The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization o... | Not Provided | 2026-03-28 | 2026-04-08 |
| CVE-2026-1834 json | The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '... | Not Provided | 2026-03-31 | 2026-04-08 |
| CVE-2026-1206 json | The Elementor Website Builder plugin for WordPress is vulnerable to Incorrect Authorization to Sensitive Information Exposure... | Not Provided | 2026-03-26 | 2026-04-08 |
| CVE-2025-67588 json | Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured... | Not Provided | 2025-12-09 | 2026-04-27 |
| CVE-2025-58033 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leeshadle Draft website... | Not Provided | 2025-09-22 | 2026-04-23 |
| CVE-2025-55709 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Visual Composer Visual ... | Not Provided | 2025-08-14 | 2026-04-23 |