Known Vulnerabilities for Website Builder by Elementor
Listed below are 10 of the newest known vulnerabilities associated with "Website Builder" by "Elementor".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65568 json | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-57619 json | Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-49782 json | Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Co... | Not Provided | 2026-06-02 | 2026-06-02 |
| CVE-2026-15601 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal (Zip S... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-15457 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal i... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-15420 json | The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Directory Tra... | Not Provided | 2026-07-24 | 2026-07-24 |
| CVE-2026-13464 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Objec... | Not Provided | 2026-07-24 | 2026-07-24 |
| CVE-2026-12900 json | The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site... | Not Provided | 2026-07-20 | 2026-07-22 |
| CVE-2026-12472 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass ... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-12122 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Sensitive Information... | Not Provided | 2026-07-02 | 2026-07-02 |