260 matches found
CVE-2022-1329
CVE-2022-1329 El plugin Elementor Website Builder para WordPress es vulnerable a la ejecución no autorizada de varias acciones AJAX debido a una verificación de capacidades faltante en el archivo /core/app/modules/onboarding/module.php, lo que hace posible que los atacantes modifiquen datos del...
CVE-2026-62062
abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-62062 CVE-2026-62062 — WordPress WordPress — Elementor Website Builder 4.3.1 — Elementor Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Websi...
Exploit for CVE-2026-62062
abraxaslabs.tech · github.com/abraxas ·&...
CVE-2026-62062
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
EUVD-2026-86532
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-62062
The Elementor Website Builder and Elementor Pro (versions 4.3.0 through 4.3.1 ) are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). The root cause is that the software skips WordPress REST API nonce validation when the REQUEST_URI contains elementor/v1/events/. Specific...
CVE-2026-62062 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-62062 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
WordPress Elementor Website Builder plugin 4.3.0-4.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Sakri Koskimies in WordPress Plugin Elementor Website Builder versions 4.3.0-4.3.1...
CVE-2026-62062: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
PT-2026-98356
Name of the Vulnerable Software and Affected Versions Elementor Website Builder versions 4.3.0 through 4.3.1 Elementor Pro versions 4.3.0 through 4.3.1 Description A Cross-Site Request Forgery CSRF flaw exists where a logged-in administrator can be tricked into opening a crafted link, leading to...
VulnCheck KEV: CVE-2026-62062
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-8825: Exposure of Sensitive Information to an Unauthorized Actor
The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning post data through one of its REST endpoints, allowing authenticated users with Contributor-level access and above to retrieve the title, body and metadata of private posts, privat...
CVE-2026-57619
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
EUVD-2026-39361
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
CVE-2026-57619
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
CVE-2026-57619 WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Steven Julian in WordPress Plugin Elementor Website Builder versions = 4.1.3...