UE
Product
Unlimited Elements For Elementor
11
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 7Low 0
Watch
Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5486 | 6.5 | May 14 | Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter Affected: through 2.0.7 |
| CVE-2025-8603 | 6.4 | Aug 28 | Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.5.148 |
| CVE-2026-77150 | 6.1 | Sep 11 | Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting Affected: through 2.0.16 |
| CVE-2026-75586 | 6.1 | Sep 5 | Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter Affected: through 2.0.17 |
| CVE-2024-13362 | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Affected: through 1.5.140 |
| CVE-2025-14274 | 5.4 | Feb 3 | Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget Affected: through 2.0.1 |
| CVE-2024-13153 | 5.4 | Jan 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: through 1.5.135 |
Showing 7