Elementor Page Builder

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-16	CVE-2020-20406	Cross-site Scripting vulnerability in Elementor Page Builder A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. network low complexity elementor CWE-79	5.4
2020-06-05	CVE-2020-13865	Cross-site Scripting vulnerability in Elementor Page Builder The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from multiple stored XSS vulnerabilities. network low complexity elementor CWE-79	5.4
2020-06-05	CVE-2020-13864	Cross-site Scripting vulnerability in Elementor Page Builder The Elementor Page Builder plugin before 2.9.9 for WordPress suffers from a stored XSS vulnerability. network low complexity elementor CWE-79	5.4
2020-05-17	CVE-2020-13126	Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Page Builder An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. network low complexity elementor CWE-434 critical	9.9
2020-04-22	CVE-2020-7055	Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Page Builder An issue was discovered in Elementor 2.7.4. network low complexity elementor CWE-434 critical	9.9
2019-10-07	CVE-2018-18379	Cross-site Scripting vulnerability in Elementor Page Builder The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS. network low complexity elementor CWE-79	6.1
2019-09-10	CVE-2017-18596	Improper Privilege Management vulnerability in Elementor Page Builder The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions. network low complexity elementor CWE-269	8.8