{"items":[{"id":"CVE-2025-3076","published":"2025-06-10T04:23:09.744Z","updated":"2026-04-08T16:35:04.765Z","title":"Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2024-8494","published":"2025-01-30T13:42:05.438Z","updated":"2026-04-08T17:09:54.992Z","title":"Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode","severity":"MEDIUM","score":4.3,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2024-4107","published":"2024-05-09T20:03:19.432Z","updated":"2026-04-08T16:35:15.101Z","title":"Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2024-1521","published":"2024-03-27T06:40:50.525Z","updated":"2026-04-08T17:31:27.418Z","title":"Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Widget SVGZ File Upload","severity":"MEDIUM","score":6.4,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-2120","published":"2024-03-27T06:40:50.015Z","updated":"2026-04-08T17:28:14.544Z","title":"Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation","severity":"MEDIUM","score":5.4,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-2121","published":"2024-03-27T06:40:49.561Z","updated":"2026-04-08T17:04:50.697Z","title":"Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":5.4,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2024-2781","published":"2024-03-27T06:40:49.006Z","updated":"2026-04-08T16:53:22.358Z","title":"Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via video_html_tag","severity":"MEDIUM","score":6.4,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-1364","published":"2024-03-27T06:40:46.893Z","updated":"2026-04-08T16:52:58.382Z","title":"Elementor Website Builder Pro <= 3.20.1 - Authententicated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2023-3124","published":"2023-06-07T01:51:20.759Z","updated":"2026-04-08T16:54:16.919Z","title":"Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option","severity":"HIGH","score":8.8,"vendor":"https://elementor.com/","product":"Elementor Website Builder Pro","kev":false,"epss":0.2272,"kevAdded":null}]}