258 matches found
CVE-2022-1329
CVE-2022-1329 The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading...
CVE-2026-62062
abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-62062 CVE-2026-62062 — WordPress WordPress — Elementor Website Builder 4.3.1 — Elementor Elementor Website Builder におけるクロスサイトリクエストフォージェリ CSRF 脆弱性により、クロスサイトリクエストフォージェリが可能です。この問題は Elementor Website Builder の n/a から 4.3.1 までのバージョンに影響します...
Exploit for CVE-2026-62062
abraxaslabs.tech · github.com/abraxas ·&...
CVE-2026-62062
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-62062
The Elementor Website Builder and Elementor Pro (versions 4.3.0 through 4.3.1 ) are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). The root cause is that the software skips WordPress REST API nonce validation when the REQUEST_URI contains elementor/v1/events/. Specific...
EUVD-2026-86532
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-62062 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-62062 WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
WordPress Elementor Website Builder plugin 4.3.0-4.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Sakri Koskimies in WordPress Plugin Elementor Website Builder versions 4.3.0-4.3.1...
CVE-2026-62062: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
PT-2026-98356
Name of the Vulnerable Software and Affected Versions Elementor Website Builder versions 4.3.0 through 4.3.1 Elementor Pro versions 4.3.0 through 4.3.1 Description A Cross-Site Request Forgery CSRF flaw exists where a logged-in administrator can be tricked into opening a crafted link, leading to...
VulnCheck KEV: CVE-2026-62062
Cross-Site Request Forgery CSRF vulnerability in Elementor Website Builder allows Cross Site Request Forgery. This issue affects Elementor Website Builder: from n/a through 4.3.1...
CVE-2026-8825: Exposure of Sensitive Information to an Unauthorized Actor
The Elementor Website Builder WordPress plugin before 4.1.4 does not properly check user permissions before returning post data through one of its REST endpoints, allowing authenticated users with Contributor-level access and above to retrieve the title, body and metadata of private posts, privat...
CVE-2026-57619
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
CVE-2026-57619
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
EUVD-2026-39361
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
CVE-2026-57619 WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability
Contributor Sensitive Data Exposure in Elementor Website Builder = 4.1.3 versions...
WordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Steven Julian in WordPress Plugin Elementor Website Builder versions = 4.1.3...