UE
Product
Unlimited Elements For Elementor
23
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 11Low 0
Watch
Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-31080 | 8.8 | Jun 9 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor… Affected: before 1.5.66 |
| CVE-2024-5329 | 8.8 | Jun 6 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parameter in all versions… Affected: before 1.5.110 |
| CVE-2024-35674 | 8.8 | Jun 5 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects… Affected: before 1.5.110 |
| CVE-2023-6743 | 8.8 | May 29 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.89 via… Affected: through 1.5.89 |
| CVE-2024-4779 | 8.8 | May 23 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up… Affected: before 1.5.108 |
| CVE-2024-3055 | 8.8 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to,… Affected: before 1.5.105 |
| CVE-2023-31090 | 8.8 | Apr 24 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to… Affected: before 1.5.61 |
| CVE-2023-3295 | 8.8 | Jun 17 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the… Affected: before 1.5.67 |
| CVE-2026-48837 | 8.5 | May 25 | WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability Affected: through 2.0.8 |
| CVE-2024-49271 | 7.2 | Oct 16 | Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows… Affected: before 1.5.122 |
| CVE-2023-33930 | 7.2 | Jun 4 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This… Affected: before 1.5.67 |
| CVE-2024-2662 | 7.2 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to command injection in all versions up to, and including, 1.5.102 Affected: before 1.5.103 |
| CVE-2023-31231 | 6.5 | Dec 20 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited… Affected: before 1.5.66 |
| CVE-2024-45454 | 6.1 | Oct 6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… Affected: before 1.5.122 |
| CVE-2024-3547 | 6.1 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'google_connect_error'… Affected: before 1.5.103 |
| CVE-2024-29792 | 6.1 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… Affected: before 1.5.95 |
| CVE-2025-1663 | 5.4 | Apr 3 | Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.5.142 |
| CVE-2024-13155 | 5.4 | Feb 20 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and… Affected: before 1.5.141 |
| CVE-2024-13153 | 5.4 | Jan 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: before 1.5.136 |
| CVE-2024-10784 | 5.4 | Dec 12 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Tile Gallery' widget in all… Affected: before 1.5.127 |
| CVE-2024-0367 | 5.4 | Mar 30 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget (e.g., 'Button Link') in all… Affected: through 1.5.96 |
| CVE-2022-47170 | 4.8 | Mar 28 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions Affected: before 1.5.49 |
| CVE-2024-3190 | 4.6 | May 30 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text field widget in all… Affected: before 1.5.108 |
Showing 23