Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ElementorWebsite Builder

8 matches found

CVE
CVE•added 2021/11/23 8:15 p.m.•79 views

CVE-2021-24891

The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue.

6.1CVSS6AI score0.09482EPSS
CVE
CVE•added 2021/01/06 3:15 p.m.•68 views

CVE-2020-36171

The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads.

6.1CVSS6.3AI score0.00127EPSS
CVE
CVE•added 2021/04/05 7:15 p.m.•38 views

CVE-2021-24206

In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php) accepts a ‘title_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a mod...

5.4CVSS5.4AI score0.00099EPSS
CVE
CVE•added 2021/04/05 7:15 p.m.•35 views

CVE-2021-24205

In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget (includes/widgets/icon-box.php) accepts a ‘title_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modif...

5.4CVSS5.4AI score0.00099EPSS
CVE
CVE•added 2021/04/05 7:15 p.m.•34 views

CVE-2021-24203

In the Elementor Website Builder WordPress plugin before 3.1.4, the divider widget (includes/widgets/divider.php) accepts an ‘html_tag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified...

5.4CVSS5.4AI score0.00099EPSS
CVE
CVE•added 2021/04/05 7:15 p.m.•33 views

CVE-2021-24204

In the Elementor Website Builder WordPress plugin before 3.1.4, the accordion widget (includes/widgets/accordion.php) accepts a ‘title_html_tag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a...

5.4CVSS5.4AI score0.00099EPSS
CVE
CVE•added 2021/04/05 7:15 p.m.•31 views

CVE-2021-24201

In the Elementor Website Builder WordPress plugin before 3.1.4, the column element (includes/elements/column.php) accepts an ‘html_tag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified...

5.4CVSS5.4AI score0.00108EPSS
CVE
CVE•added 2021/04/05 7:15 p.m.•30 views

CVE-2021-24202

In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php) accepts a ‘header_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modifi...

5.4CVSS5.4AI score0.00099EPSS