UE
Product
Unlimited Elements For Elementor
23
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 11Low 0
Watch
Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-31080 | 8.8 | Jun 9 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor… Affected: before 1.5.66 |
| CVE-2024-5329 | 8.8 | Jun 6 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parameter in all versions… Affected: before 1.5.110 |
| CVE-2024-35674 | 8.8 | Jun 5 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects… Affected: before 1.5.110 |
| CVE-2023-6743 | 8.8 | May 29 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.89 via… Affected: through 1.5.89 |
| CVE-2024-4779 | 8.8 | May 23 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up… Affected: before 1.5.108 |
| CVE-2024-3055 | 8.8 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to,… Affected: before 1.5.105 |
| CVE-2023-31090 | 8.8 | Apr 24 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to… Affected: before 1.5.61 |
| CVE-2023-3295 | 8.8 | Jun 17 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the… Affected: before 1.5.67 |
| CVE-2026-48837 | 8.5 | May 25 | WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability Affected: through 2.0.8 |
| CVE-2024-49271 | 7.2 | Oct 16 | Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows… Affected: before 1.5.122 |
| CVE-2023-33930 | 7.2 | Jun 4 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This… Affected: before 1.5.67 |
| CVE-2024-2662 | 7.2 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to command injection in all versions up to, and including, 1.5.102 Affected: before 1.5.103 |
Showing 12
