CVE-2020-36171: Elementor Website Builder

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The Elementor Website Builder plugin before 3.0.14 for WordPress does not properly restrict SVG uploads.

Affected products

• Elementor Website Builder: before 3.0.14 (fixed in 3.0.14)

Published 2021-01-06. Last modified 2026-06-17.