Vulnerabilities / Elementor Website Builder
Elementor Website Builder vulnerabilities
Advisories WPSec published for Elementor Website Builder – more than just a page builder. Other sources may list more. Its attack surface: Elementor Website Builder on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0903 | Elementor Website Builder <= 4.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG CDATA Sections | Medium 4.9 | 4.3.5 |
| 2026-10-14 | WPSEC-2026-0902 | Elementor Website Builder <= 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline Post CSS | Medium 4.9 | 4.3.5 |
| 2026-10-14 | WPSEC-2026-0901 | Elementor Website Builder <= 4.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload Validation Bypass | Medium 4.9 | 4.3.5 |
License: CC BY 4.0