High
CVE-2021-4401
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
High
CVE-2021-3133
Elementor Contact Form DB <= 1.5 - Cross-Site Request Forgery
High
CVE-2021-25080
Contact Form Entries <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2020-36171
Elementor Website Builder <= 3.0.13 - Unrestricted SVG Uploads
Critical
CVE-2021-24158
Orbit Fox by ThemeIsle <= 2.10.2 - Authenticated Privilege Escalation
High
CVE-2020-26596
Elementor Pro <= 3.0.5 - Authenticated Remote Code Execution in Dynamic OOO Widget
Medium
a0297cab-8b6f-4e09-b552-4772c6f72c04
Elementor Addon Elements <= 1.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2020-15020
Elementor Website Builder <= 2.9.13 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-13865
Elementor Website Builder <= 2.9.8 - Stored Cross-Site Scripting
Medium
CVE-2020-13864
Elementor Website Builder <= 2.9.8 - Stored Cross-Site Scripting
High
CVE-2020-13125
Ultimate Addons for Elementor <= 1.24.1 - Registration Bypass
Critical
CVE-2020-13126
Elementor Pro <= 2.9.3 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2020-36703
Elementor Website Builder <= 2.9.7 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2020-20634
Elementor Website Builder <= 2.9.5 - Authorization Bypass
Critical
CVE-2020-12073
Responsive Ready Sites Importer <= 2.2.6 - Unprotected AJAX Actions
Medium
CVE-2020-20406
Elementor Website Builder <= 2.9.2 - Stored Cross-Site Scripting
Medium
CVE-2020-8426
Elementor Website Builder <= 2.8.4 - Reflected Cross-Site Scripting
Medium
0e41384f-1dec-418b-be48-fc61def5ca28
Elementor Website Builder <= 2.7.5 - Stored Cross-Site Scripting
High
CVE-2020-7109
Elementor Website Builder <= 2.8.3 - Cross-Site Scripting
Critical
ee678085-ce74-4a35-9d90-3b94a3d39a8e
Ultimate Addons for Elementor < 1.20.1 - Authentication Bypass
High
CVE-2020-7055
Elementor Website Builder <= 2.7.4 - Arbitrary File Upload
Critical
CVE-2019-15839
Sina Extension for Elementor < 2.2.1 - Local File Inclusion
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2018-18379
Elementor Pro <= 2.0.9 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.