CVE-2022-29455 (MEDIUM 6.1) · Watchpost

← All vulnerabilities

CVE-2022-29455

MEDIUM 6.1CVE-2022-29455 · Published 13/06/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
website builder elementor	`≤ 3.5.5`	No fix yet

Description

DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.

References

patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-5-5-unauthenticated-dom-based-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
rotem-bar.com/hacking-65-million-websites-greater-cve-2022-29455-elementor · Broken Link
wordpress.org/plugins/elementor · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free