Theme Builder For Elementor Vulnerabilities

The Theme Builder For Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick...

CVSS:

4.3

Affected:

up to 1.2.3

Fixed in:

1.2.4

Disclosed:

Jul 16, 2025

CVE-2025-54033 on NVD →

The Theme Builder For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access...

CVSS:

4.3

Affected:

up to 1.2.2

Fixed in:

1.2.3

Disclosed:

Nov 20, 2024

CVE-2024-10782 on NVD →