CVE-2020-7055: Elementor Page Builder

Critical severity, CVSS 9.9. EPSS: 3.1% chance of exploitation in the next 30 days.

An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.

Affected products

• Elementor Elementor Page Builder: up to and including 2.7.4

Published 2020-04-22. Last modified 2026-06-17.