CVE-2022-29455

Description

References

• patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-5-5-unauthenticated-dom-based-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
• rotem-bar.com/hacking-65-million-websites-greater-cve-2022-29455-elementor · Broken Link
• wordpress.org/plugins/elementor · Release Notes

Weitere Schwachstellen in website builder

• CVE-2025-8081MITTEL 4.9The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the Import_Images::…
• CVE-2025-3075MITTEL 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug…
• CVE-2024-54444MITTEL 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder el…
• CVE-2024-13445MITTEL 5.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bord…
• CVE-2024-8494MITTEL 6.5The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…