Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through <= 3.29.0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Elementor Plugin | — | Update elementor plugin to version 3.29.1, or a newer patched version | Jun 26, 2025 | Jun 19, 2025 |
| Elementor Pro Plugin | — | Update elementor-pro plugin to version 3.29.1, or a newer patched version | Jun 26, 2025 | Jun 19, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub