Elementor Pro

Vulnerabilities 19Slug elementor-proLatest version 3.6.5Plugin page →

Minimum safe version

3.29.1

Update to 3.29.1 or later to address 19 fixable vulnerabilities

Latest available3.6.5 ✗

Medium 6.5

2026-02-20< 3.29.1

CVE-2024-50555

CVE Wordfence

Medium 6.4

2025-06-10< 3.29.1

Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVD Wordfence CVE

Medium 4.3

2025-01-30< 3.25.11

WordPress Elementor Pro Plugin <= 3.25.10 is vulnerable to Sensitive Data Exposure

Patchstack EUVD Wordfence CVE

Medium 6.1

2024-07-22< 3.21.3

CVE-2024-35656

CVE Patchstack Wordfence

Medium 5.4

2024-05-09< 3.21.2

CVE-2024-4107

CVE Patchstack Wordfence

Medium 5.4

2024-03-27< 3.20.2

CVE-2024-1521

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-27< 3.20.2

CVE-2024-1364

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-27< 3.20.2

CVE-2024-2781

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-27< 3.20.2

CVE-2024-2120

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-03-27< 3.20.2

CVE-2024-2121

CVE Wordfence Patchstack WPScan

Medium 6.5

2024-03-16< 3.19.3

CVE-2024-23523

CVE Wordfence Patchstack WPScan

Medium 5.4

2024-06-19< 3.13.1

CVE-2023-35050

CVE Patchstack Wordfence

High 8.8

2023-06-07< 3.11.7

CVE-2023-3124

CVE WPScan

N/A

2023-03-28< 3.11.7

WordPress Elementor Pro Plugin <= 3.11.6 is vulnerable to Broken Access Control

Patchstack

N/A

2023-03-28< 3.11.7

Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

Wordfence

Medium 6.1

2019-10-07< 2.0.10

CVE-2018-18379

CVE Wordfence WPScan

Critical 9.9

2020-05-17< 2.9.4

CVE-2020-13126

CVE Patchstack Wordfence WPScan

Medium 6.5

2020-05-17< 2.9.4

CVE-2020-13125

CVE

High 8.8

2020-10-07< 3.0.6

CVE-2020-26596

CVE Wordfence