Known CVE

WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting

WordPress Elementor Website Builder plugin before 3.1.4 contains a DOM cross-site scripting vulnerability. It does not sanitize or escape user input appended to the DOM via a malicious hash.

CVE-2021-24891

Medium2021CVSS 6.1CWE-79

cve2021 · wordpress · wp-plugin · elementor · wpscan · dom · xss · passive

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website