Unlimited Elements For Elementor vulnerabilities | LiveThreat CVE Feed

Product

Unlimited Elements For Elementor

by Unlimited Elements · last CVE May 25, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 0High 12Medium 11Low 0

Severity

All severities23 Critical0 High12 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-31231	6.5	1%	Dec 20	Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited… Affected: before 1.5.66
CVE-2024-45454	6.1	0%	Oct 6	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… Affected: before 1.5.122
CVE-2024-3547	6.1	0%	May 14	The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'google_connect_error'… Affected: before 1.5.103
CVE-2024-29792	6.1	1%	Mar 27	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… Affected: before 1.5.95
CVE-2025-1663	5.4	0%	Apr 3	Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.5.142
CVE-2024-13155	5.4	0%	Feb 20	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget Affected: before 1.5.141
CVE-2024-13153	5.4	0%	Jan 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: before 1.5.136
CVE-2024-10784	5.4	0%	Dec 12	The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Tile Gallery' widget in all… Affected: before 1.5.127
CVE-2024-0367	5.4	0%	Mar 30	The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget (e.g., 'Button Link') in all… Affected: through 1.5.96
CVE-2022-47170	4.8	0%	Mar 28	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions Affected: before 1.5.49
CVE-2024-3190	4.6	0%	May 30	The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text field widget in all… Affected: before 1.5.108