Unlimited Elements For Elementor vulnerabilities | LiveThreat CVE Feed

Product

Unlimited Elements For Elementor

by unitecms · last CVE Sep 11, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 4Medium 6Low 0

Severity

All severities10 Critical0 High4 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-18561	7.5	1%	Sep 11	Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection Affected: through 2.0.16
CVE-2026-4659	7.5	1%	Apr 17	Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal Affected: through 2.0.6
CVE-2026-2724	7.2	0%	Mar 10	Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields Affected: through 2.0.5
CVE-2025-13692	7.2	0%	Nov 27	Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload Affected: through 2.0
CVE-2026-5486	6.5	0%	May 14	Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter Affected: through 2.0.7
CVE-2026-77150	6.1	0%	Sep 11	Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting Affected: through 2.0.16
CVE-2026-75586	6.1	0%	Sep 5	Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter Affected: through 2.0.17
CVE-2024-13362	6.1	0%	May 1	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Affected: through 1.5.140
CVE-2025-14274	5.4	0%	Feb 3	Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget Affected: through 2.0.1
CVE-2024-13153	5.4	0%	Jan 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: through 1.5.135