Layouts For Elementor Vulnerabilities

[en] Cross-Site Request Forgery (CSRF) vulnerability in Giraphix Creative Layouts for Elementor allows Cross Site Request Forgery. This issue affects Layouts for Elementor: from n/a through 1.11.

Affected:

up to 1.11

Fix:

No patched version reported

Disclosed:

Jun 6, 2025

CVE-2025-30948 on NVD →

The Layouts for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.11. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site...

CVSS:

4.3

Affected:

up to 1.11

Fixed in:

1.12

Disclosed:

Jun 5, 2025

CVE-2025-30948 on NVD →

[en] Unrestricted Upload of File with Dangerous Type vulnerability in Techeshta Layouts for Elementor.This issue affects Layouts for Elementor: from n/a before 1.8.

Affected:

up to 1.8

Fixed in:

1.8

Disclosed:

Mar 31, 2024

CVE-2024-30533 on NVD →

The Layouts for Elementor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the handle_import() function in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to upload arbitrary files that can be used to achieve remote code execu...

CVSS:

10

Affected:

up to 1.7

Fixed in:

1.8

Disclosed:

Mar 29, 2024

CVE-2024-30533 on NVD →