Website Builder vulnerabilities

4 known vulnerabilities in Website Builder from Elementor. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Elementor Website Builder: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-24934May 17, 2024Elementor

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Elementor Elementor Website Builder allows Manipulating Web Input to File System Calls.This issue affects Elementor Website Builder: from n/a through 3.19.0.

• 9.8 Critical severity

  Elementor Website Builder: Improper Authentication

  CVE-2023-47504Apr 24, 2024ElementorEPSS 1.71%

  Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.

• 8.8 High severity

  Elementor Website Builder: Unrestricted Upload of File with Dangerous Type

  CVE-2023-48777Mar 26, 2024Elementor.comEPSS 4.1%

  Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.

• 8.8 High severity

  Elementor Website Builder: Missing Authorization

  CVE-2022-1329Apr 19, 2022ElemntorEPSS 92.7%

  The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the ~/core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in