CVE-2026-6127

Elementor Website Builder <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API

List of 1,259,248 websites affected by CVE-2026-6127

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
****.io	France	***
**************.de	Germany	***
**********.com	United States	,**
****.chat	United States	,**
**********.de	Germany	,**
******.io	United States	,**
*******.net	Germany	,**
************.net	United States	,**
********.com	United States	,**
******.com	United States	,**
**********.com	United States	,**
.*.br	Brazil	,**
******.com	United States	,**
***********.*.br	Brazil	,**
*****.com	United States	,**
*****.com	United States	,**
***********.com	United States	,**
******.net	United States	,**
**********.com	Czech Republic	,**
********.com	United States	,**