Elementor Pro vulnerabilities

2 known vulnerabilities in Elementor Pro from Elementor. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Elementor Pro: Unrestricted Upload of File with Dangerous Type

  CVE-2026-32475Aug 19, 2026ElementorEPSS 1.99%

  Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

• 8.8 High severity

  Elementor Website Builder Pro: Missing Authorization

  CVE-2023-3124Jun 7, 2023Https://elementor.com/EPSS 22.7%

  The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_page_option function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscr