Known Vulnerabilities for Website Builder by Elementor
Listed below are 10 of the newest known vulnerabilities associated with "Website Builder" by "Elementor".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-106596 json | Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incor... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-102291 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode e... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-102173 json | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scr... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-97340 json | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via ... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-97262 json | Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions. | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-95865 json | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection v... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-92084 json | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortco... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-84925 json | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting v... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-83492 json | Improper input validation vulnerability in Extend Themes Kubio AI Website Builder. This issue affects Kubio AI Website Build... | Not Provided | 2026-08-31 | 2026-08-31 |
| CVE-2026-82923 json | The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its REST AP... | Not Provided | 2026-09-04 | 2026-09-04 |