|2020-06-05||Elementor Page Builder < 2.9.10 - Authenticated Stored XSS||fixed in version 2.9.10 - 8.0 (High)|
|2020-05-06||Elementor < 2.9.8 - SVG Sanitizer Bypass leading to Authenticated Stored...||fixed in version 2.9.8 - 5.5 (Medium)|
|2020-03-31||Elementor Page Builder < 2.9.6 - Authenticated Safe Mode Privilege Escal...||fixed in version 2.9.6|
|2020-01-29||Elementor Page Builder < 2.8.5 - Authenticated Reflected XSS||fixed in version 2.8.5|
|2020-01-29||Elementor Page Builder < 2.7.6 - Authenticated Stored XSS||fixed in version 2.7.7|
|2020-01-14||Elementor < 2.7.5 - Authenticated Arbitrary File Upload||fixed in version 2.7.5 - 9.1 (Critical)|
|2017-11-27||Elementor Page Builder <= 1.7.12 - Authenticated Unrestricted Editing||fixed in version 1.8.0|
Is this your plugin?
We offer WordPress plugin security testing to help identify security vulnerabilities within your plugin. Please note that this is a paid service. If you are interested in talking about having your plugin tested by WordPress security experts, get in touch.