Security researchers issued an advisory on six unique XSS vulnerabilities discovered in the Elementor Website Builder and its Pro version that may allow attackers to inject malicious scripts.

Two Stored Cross-Site Scripting (XSS) vulnerabilities could allow attackers to inject malicious scripts into WordPress sites XSS vulnerabilities originated with inadequate sanitization and output ...

Attackers are exploiting a critical-severity privilege escalation vulnerability (CVE-2025–8489) in the King Addons for Elementor plugin for WordPress, which lets them obtain administrative permissions ...

Hackers are actively exploiting a high-severity vulnerability in the popular Elementor Pro WordPress plugin to install backdoors on sites. Elementor Pro is a WordPress page builder plugin allowing ...

In our 2025 Elementor review, we take another look at one of the most popular page builders for WordPress.org. With over 17 million users worldwide, Elementor has established itself as a leading ...

Israeli company Elementor, the developer of a building platform for WordPress websites, has acquired Strattic, a web development and hosting solutions outfit based in Jerusalem, in an all-Israeli deal ...