CVE-2022-29455: Elementor Website Builder

Medium severity, CVSS 6.1. EPSS: 23.7% chance of exploitation in the next 30 days.

DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.

Affected products

• Elementor Website Builder: up to and including 3.5.5

Published 2022-06-13. Last modified 2026-06-17.