Known vulnerabilities in Elementor Website Builder – more than just a page builder
The Elementor Website Builder has it all: drag and drop page builder, Atomic Editor, pixel perfect design, global and reusable style systems, mobile r …
39Reported vulnerabilities
9.8Highest CVSS score
4.2.2Latest version
10,000,000+Active installs
What to do now
Update Elementor Website Builder – more than just a page builder to 4.1.4 or later.
39 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2022-1329 | High | 92.7% | 3.6.0 to 3.6.2 (inclusive) | 3.6.3 |
April 19, 2022 |
| CVE-2023-47505 | Medium | 25.3% | 3.16.4 and earlier | 3.16.5 |
November 8, 2023 |
| CVE-2022-29455 | Medium | 23.7% | 3.5.5 and earlier | 3.5.6 |
June 13, 2022 |
| CVE-2023-48777 | High | 4.1% | 3.18.1 and earlier | 3.18.2 |
December 6, 2023 |
| CVE-2020-7109 | Critical | 1.7% | Before 2.8.4 | 2.8.4 |
January 22, 2020 |
| CVE-2020-8426 | Medium | 1.3% | Before 2.8.5 | 2.8.5 |
January 28, 2020 |
| CVE-2020-7055 | High | 3.1% | Before 2.7.5 | 2.7.5 |
October 28, 2019 |
| CVE-2017-18596 | High | 1.4% | Before 1.8.0 | 1.8.0 |
September 10, 2019 |
| CVE-2024-24934 | High | 0.7% | 3.19.0 and earlier | 3.19.1 |
February 7, 2024 |
| CVE-2023-47504 | Medium | 1.5% | 3.16.4 and earlier | 3.16.5 |
November 8, 2023 |
| CVE-2025-14732 | Medium | 0.3% | 0 to 3.35.5 (inclusive) | 3.35.6 |
April 8, 2026 |
| CVE-2024-54444 | Medium | 0.3% | 3.25.10 and earlier | 3.25.11 |
February 24, 2025 |
| CVE-2024-13445 | Medium | 0.3% | 3.27.4 and earlier | 3.27.5 |
February 19, 2025 |
| CVE-2024-37437 | Medium | 0.3% | 3.22.1 and earlier | 3.22.2 |
June 28, 2024 |
| CVE-2024-2117 | Medium | 0.5% | 3.20.2 and earlier | 3.20.3 |
March 26, 2024 |
| CVE-2020-20406 | Medium | 0.7% | 2.9.2 and earlier | 2.9.3 |
February 26, 2020 |
| CVE-2026-6127 | Medium | 0.2% | 0 to 4.0.4 (inclusive) | 4.0.5 |
May 1, 2026 |
| CVE-2026-32352 | Medium | 0.2% | 3.35.5 and earlier | 3.35.6 |
February 13, 2026 |
| CVE-2025-11220 | Medium | 0.2% | 0 to 3.33.3 (inclusive) | 3.33.4 |
December 16, 2025 |
| CVE-2025-4566 | Medium | 0.2% | 0 to 3.30.2 (inclusive) | 3.30.3 |
July 29, 2025 |
| CVE-2025-3075 | Medium | 0.2% | 3.29.0 and earlier | 3.29.1 |
July 28, 2025 |
| CVE-2020-36171 | Medium | 0.8% | Before 3.0.14 | 3.0.14 |
January 6, 2021 |
| WF-0e41384f-1dec-418b-be48-fc61def5ca28 | Medium | — | 2.7.5 and earlier | 2.7.6 |
January 29, 2020 |
| CVE-2024-10453 | Medium | 0.3% | 0 to 3.25.9 (inclusive) | 3.25.10 |
December 21, 2024 |
| CVE-2024-8236 | Medium | 0.4% | 0 to 3.25.7 (inclusive) | 3.25.8 |
November 26, 2024 |
| CVE-2024-5416 | Medium | 0.4% | Before 3.24.0 | 3.24.0 |
September 11, 2024 |
| CVE-2024-4619 | Medium | 0.4% | 0 to 3.21.5 (inclusive) | 3.21.6 |
May 21, 2024 |
| CVE-2024-0506 | Medium | 0.5% | 0 to 3.18.3 (inclusive) | 3.19.0 |
February 29, 2024 |
| CVE-2023-33922 | Medium | 0.3% | Before 3.13.3 | 3.13.3 |
May 22, 2023 |
| CVE-2020-15020 | Medium | 0.7% | 2.9.13 and earlier | 2.9.14 |
August 31, 2020 |
| WF-b66e2537-f187-4237-b248-f8a361f9cb00 | Medium | — | 3.13.1 and earlier | 3.13.2 |
May 12, 2023 |
| CVE-2025-8081 | Medium | 0.5% | 0 to 3.30.2 (inclusive) | 3.30.3 |
August 12, 2025 |
| CVE-2026-8825 | Medium | 0.4% | 4.1.3 and earlier | 4.1.4 |
June 29, 2026 |
| CVE-2026-57619 | Medium | 0.4% | 4.1.3 and earlier | 4.1.4 |
June 25, 2026 |
| CVE-2026-49782 | Medium | 0.2% | 4.1.0 and earlier | 4.1.1 |
June 2, 2026 |
| CVE-2026-1206 | Medium | 0.3% | 0 to 3.35.7 (inclusive) | 3.35.8 |
March 26, 2026 |
| CVE-2026-32445 | Medium | 0.2% | 3.35.5 and earlier | 3.35.6 |
March 7, 2026 |
| CVE-2025-67588 | Medium | 0.2% | 3.33.0 and earlier | 3.33.1 |
November 25, 2025 |
| CVE-2024-6757 | Medium | 0.4% | 0 to 3.24.5 (inclusive) | 3.24.6 |
October 15, 2024 |