Known Vulnerabilities for Website Builder by Elementor
Listed below are 10 of the newest known vulnerabilities associated with "Website Builder" by "Elementor".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-83492 json | Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Build... | Not Provided | 2026-08-31 | 2026-08-31 |
| CVE-2026-82923 json | The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its REST AP... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-75017 json | The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-65568 json | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-62138 json | Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.1 versions. | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-57619 json | Contributor Sensitive Data Exposure in Elementor Website Builder <= 4.1.3 versions. | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-18347 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass ... | Not Provided | 2026-08-16 | 2026-08-17 |
| CVE-2026-18021 json | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortco... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-17604 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal i... | Not Provided | 2026-08-16 | 2026-08-17 |
| CVE-2026-17090 json | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scr... | Not Provided | 2026-08-15 | 2026-08-17 |