Vulnerabilities > Elementor > Elementor Page Builder > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-05-17 | CVE-2020-13126 | Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Page Builder An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. | 6.5 |
| 2019-10-07 | CVE-2018-18379 | Cross-site Scripting vulnerability in Elementor Page Builder The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS. | 4.3 |
| 2019-09-10 | CVE-2017-18596 | Improper Privilege Management vulnerability in Elementor Page Builder The elementor plugin before 1.8.0 for WordPress has incorrect access control for internal functions. | 6.5 |