UN
Vendor
unitecms
13
CVEs
0
On KEV
0
New 30D
Products
UE7.5
Unlimited Elements For Elementor
unitecms
10 CVEs0 on KEV0 new
DC8.8
Doubly – Cross Domain Copy Paste for WordPress
unitecms
1 CVEs0 on KEV0 new
UA7.2
Unlimited Addons For Wpbakery Page Builder
Unitecms
1 CVEs0 on KEV0 new
UE7.2
Unlimited Elements for Elementor (Premium)
unitecms
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-18561 | UE Unlimited Elements For Elementor unitecms | 7.5 | Sep 11 | Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection |
| CVE-2026-77150 | UE Unlimited Elements For Elementor unitecms | 6.1 | Sep 11 | Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting |
| CVE-2026-75586 | UE Unlimited Elements For Elementor unitecms | 6.1 | Sep 5 | Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter |
| CVE-2026-5486 | UE Unlimited Elements For Elementor unitecms | 6.5 | May 14 | Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter |
| CVE-2024-13362 | UE Unlimited Elements For Elementor unitecms | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2026-4659 | UE Unlimited Elements For Elementor unitecms | 7.5 | Apr 17 | Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal |
| CVE-2026-2724 | UE Unlimited Elements For Elementor unitecms | 7.2 | Mar 10 | Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields |
| CVE-2025-14274 | UE Unlimited Elements For Elementor unitecms | 5.4 | Feb 3 | Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget |
| CVE-2025-14476 | DC Doubly – Cross Domain Copy Paste for WordPress unitecms | 8.8 | Dec 13 | Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import |
| CVE-2025-13692 | UE Unlimited Elements For Elementor unitecms | 7.2 | Nov 27 | Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload |
| CVE-2024-13153 | UE Unlimited Elements For Elementor unitecms | 5.4 | Jan 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2023-6925 | UA Unlimited Addons For Wpbakery Page Builder Unitecms | 7.2 | Feb 5 | The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importZipFile'… |