Elementor: >> Website Builder >> 1.0.4 Security Vulnerabilities
Elementor 2.9.5 and below WordPress plugin allows authenticated users to activate its safe mode feature. This can be exploited to disable all security plugins on the blog.
CVSS Score
6.5
EPSS Score
0.005
Published
2020-08-21
The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user.
CVSS Score
5.4
EPSS Score
0.004
Published
2020-01-28
The Elementor Page Builder plugin before 2.8.4 for WordPress does not sanitize data during creation of a new template.
CVSS Score
9.8
EPSS Score
0.009
Published
2020-01-22
Page 4