{"id":1770,"date":"2021-03-17T17:19:48","date_gmt":"2021-03-17T17:19:48","guid":{"rendered":"http:\/\/workingwithwordpress.com\/?p=1770"},"modified":"2021-03-17T17:23:47","modified_gmt":"2021-03-17T17:23:47","slug":"elementor-cross-scripting-vulnerabilities-found","status":"publish","type":"post","link":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/","title":{"rendered":"Elementor Cross Scripting Vulnerabilities found!"},"content":{"rendered":"\n<p>Using Elementor? If you&#8217;re not covered with our maintenance and support plans (we do this all for you) You may not know that Wordfence have just issued an alert on Cross Scripting Vulnerabilities that have been found in versions before and including 3.1.2. <\/p>\n\n\n\n<p>The vulnerability  would allow any user to access Elementor editor to add Javascript into posts and pages. This could then be executed regardless of whether the page or post is previewed, edited, cloned etc. Therefore- this could be used to take over the website<\/p>\n\n\n\n<p>In short &#8211; make sure you update to 3.1.4 immediately! Versions affected &lt; 3.1.2<\/p>\n\n\n\n<p>Need more info ? See here &#8211; <a href=\"https:\/\/www.wordfence.com\/blog\/2021\/03\/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">https:\/\/www.wordfence.com\/blog\/2021\/03\/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites\/<\/a><\/p>\n\n\n\n<p>Need help?<a href=\"mailto:hello@workingwithwordpress.com\"> Pop us a message <\/a><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-1024x696.jpg\" alt=\"Elementor Vulnerabilities Found\" class=\"wp-image-1772\"\/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Using Elementor? If you&#8217;re not covered with our maintenance and support plans (we do this all for you) You may not know that Wordfence have just issued an alert on Cross Scripting Vulnerabilities that have been found in versions before and including 3.1.2. The vulnerability would allow any user to access Elementor editor to add [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1772,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Elementor Cross Scripting Vulnerabilities found! - Wordpress Support and Maintenance | Working With Wordpress<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Elementor Cross Scripting Vulnerabilities found! - Wordpress Support and Maintenance | Working With Wordpress\" \/>\n<meta property=\"og:description\" content=\"Using Elementor? If you&#8217;re not covered with our maintenance and support plans (we do this all for you) You may not know that Wordfence have just issued an alert on Cross Scripting Vulnerabilities that have been found in versions before and including 3.1.2. The vulnerability would allow any user to access Elementor editor to add [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/\" \/>\n<meta property=\"og:site_name\" content=\"Wordpress Support and Maintenance | Working With Wordpress\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/workingwithwp\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-17T17:19:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-03-17T17:23:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1739\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"kelly3330\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"kelly3330\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/\"},\"author\":{\"name\":\"kelly3330\",\"@id\":\"https:\/\/workingwithwordpress.com\/#\/schema\/person\/7b6a12f1d2d8d17fb5f5dadedbbbd1af\"},\"headline\":\"Elementor Cross Scripting Vulnerabilities found!\",\"datePublished\":\"2021-03-17T17:19:48+00:00\",\"dateModified\":\"2021-03-17T17:23:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/\"},\"wordCount\":123,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/workingwithwordpress.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg\",\"articleSection\":[\"Insights\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/\",\"url\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/\",\"name\":\"Elementor Cross Scripting Vulnerabilities found! - Wordpress Support and Maintenance | Working With Wordpress\",\"isPartOf\":{\"@id\":\"https:\/\/workingwithwordpress.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg\",\"datePublished\":\"2021-03-17T17:19:48+00:00\",\"dateModified\":\"2021-03-17T17:23:47+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage\",\"url\":\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg\",\"contentUrl\":\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg\",\"width\":2560,\"height\":1739,\"caption\":\"Elementor Vulnerabilities Found\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/workingwithwordpress.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Elementor Cross Scripting Vulnerabilities found!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/workingwithwordpress.com\/#website\",\"url\":\"https:\/\/workingwithwordpress.com\/\",\"name\":\"Wordpress Support and Maintenance | Working With Wordpress\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/workingwithwordpress.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/workingwithwordpress.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/workingwithwordpress.com\/#organization\",\"name\":\"Working with Wordpress\",\"url\":\"https:\/\/workingwithwordpress.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/workingwithwordpress.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/cropped-www2.png\",\"contentUrl\":\"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/cropped-www2.png\",\"width\":500,\"height\":140,\"caption\":\"Working with Wordpress\"},\"image\":{\"@id\":\"https:\/\/workingwithwordpress.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/workingwithwp\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/workingwithwordpress.com\/#\/schema\/person\/7b6a12f1d2d8d17fb5f5dadedbbbd1af\",\"name\":\"kelly3330\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/workingwithwordpress.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1f60ce44eb937c9abcff9ae0691ac267?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1f60ce44eb937c9abcff9ae0691ac267?s=96&d=mm&r=g\",\"caption\":\"kelly3330\"},\"sameAs\":[\"http:\/\/workingwithwordpress.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Elementor Cross Scripting Vulnerabilities found! - Wordpress Support and Maintenance | Working With Wordpress","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/","og_locale":"en_GB","og_type":"article","og_title":"Elementor Cross Scripting Vulnerabilities found! - Wordpress Support and Maintenance | Working With Wordpress","og_description":"Using Elementor? If you&#8217;re not covered with our maintenance and support plans (we do this all for you) You may not know that Wordfence have just issued an alert on Cross Scripting Vulnerabilities that have been found in versions before and including 3.1.2. The vulnerability would allow any user to access Elementor editor to add [&hellip;]","og_url":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/","og_site_name":"Wordpress Support and Maintenance | Working With Wordpress","article_publisher":"https:\/\/www.facebook.com\/workingwithwp","article_published_time":"2021-03-17T17:19:48+00:00","article_modified_time":"2021-03-17T17:23:47+00:00","og_image":[{"width":2560,"height":1739,"url":"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg","type":"image\/jpeg"}],"author":"kelly3330","twitter_card":"summary_large_image","twitter_misc":{"Written by":"kelly3330","Estimated reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#article","isPartOf":{"@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/"},"author":{"name":"kelly3330","@id":"https:\/\/workingwithwordpress.com\/#\/schema\/person\/7b6a12f1d2d8d17fb5f5dadedbbbd1af"},"headline":"Elementor Cross Scripting Vulnerabilities found!","datePublished":"2021-03-17T17:19:48+00:00","dateModified":"2021-03-17T17:23:47+00:00","mainEntityOfPage":{"@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/"},"wordCount":123,"commentCount":0,"publisher":{"@id":"https:\/\/workingwithwordpress.com\/#organization"},"image":{"@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage"},"thumbnailUrl":"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg","articleSection":["Insights"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/","url":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/","name":"Elementor Cross Scripting Vulnerabilities found! - Wordpress Support and Maintenance | Working With Wordpress","isPartOf":{"@id":"https:\/\/workingwithwordpress.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage"},"image":{"@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage"},"thumbnailUrl":"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg","datePublished":"2021-03-17T17:19:48+00:00","dateModified":"2021-03-17T17:23:47+00:00","breadcrumb":{"@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#primaryimage","url":"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg","contentUrl":"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/pexels-john-petalcurin-2115257-scaled.jpg","width":2560,"height":1739,"caption":"Elementor Vulnerabilities Found"},{"@type":"BreadcrumbList","@id":"https:\/\/workingwithwordpress.com\/elementor-cross-scripting-vulnerabilities-found\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/workingwithwordpress.com\/"},{"@type":"ListItem","position":2,"name":"Elementor Cross Scripting Vulnerabilities found!"}]},{"@type":"WebSite","@id":"https:\/\/workingwithwordpress.com\/#website","url":"https:\/\/workingwithwordpress.com\/","name":"Wordpress Support and Maintenance | Working With Wordpress","description":"","publisher":{"@id":"https:\/\/workingwithwordpress.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/workingwithwordpress.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/workingwithwordpress.com\/#organization","name":"Working with Wordpress","url":"https:\/\/workingwithwordpress.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/workingwithwordpress.com\/#\/schema\/logo\/image\/","url":"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/cropped-www2.png","contentUrl":"https:\/\/workingwithwordpress.com\/wp-content\/uploads\/cropped-www2.png","width":500,"height":140,"caption":"Working with Wordpress"},"image":{"@id":"https:\/\/workingwithwordpress.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/workingwithwp"]},{"@type":"Person","@id":"https:\/\/workingwithwordpress.com\/#\/schema\/person\/7b6a12f1d2d8d17fb5f5dadedbbbd1af","name":"kelly3330","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/workingwithwordpress.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1f60ce44eb937c9abcff9ae0691ac267?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1f60ce44eb937c9abcff9ae0691ac267?s=96&d=mm&r=g","caption":"kelly3330"},"sameAs":["http:\/\/workingwithwordpress.com"]}]}},"_links":{"self":[{"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/posts\/1770"}],"collection":[{"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/comments?post=1770"}],"version-history":[{"count":0,"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/posts\/1770\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/media\/1772"}],"wp:attachment":[{"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/media?parent=1770"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/categories?post=1770"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/workingwithwordpress.com\/wp-json\/wp\/v2\/tags?post=1770"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}