UE
Vendor
Unlimited Elements
43
CVEs
0
On KEV
9
New 30D
Products
UE9.3
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Unlimited Elements
19 CVEs0 on KEV9 new
UE8.8
Unlimited Elements For Elementor
Unlimited Elements
23 CVEs0 on KEV0 new
AL8.8
Addon Library
Unlimited-elements
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115593 New | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 28 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-95534 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 8.8 | Oct 7 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability |
| CVE-2026-94662 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 7 | WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-105064 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.5 | Oct 5 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability |
| CVE-2026-103355 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 9.3 | Oct 4 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability |
| CVE-2026-103344 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 4 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-103342 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 3 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-103341 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 5.3 | Oct 1 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability |
| CVE-2026-103338 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 8.5 | Oct 1 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability |
| CVE-2026-66608 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.4 | Sep 17 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-84820 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Sep 8 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-85304 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 5.3 | Sep 3 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability |
| CVE-2026-28146 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.5 | Aug 6 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability |
| CVE-2026-28147 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 5.4 | Aug 3 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability |
| CVE-2026-57718 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Jul 13 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-48837 | UE Unlimited Elements For Elementor Unlimited Elements | 8.5 | May 25 | WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability |
| CVE-2025-1663 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Apr 3 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.142 due to… |
| CVE-2024-13155 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Feb 20 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and… |
| CVE-2024-13153 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Jan 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2024-10784 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Dec 12 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Tile Gallery' widget in all… |
| CVE-2024-49271 | UE Unlimited Elements For Elementor Unlimited-elements | 7.2 | Oct 16 | Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows… |
| CVE-2024-45454 | UE Unlimited Elements For Elementor Unlimited-elements | 6.1 | Oct 6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… |
| CVE-2024-6171 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 5.3 | Jul 9 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 1.5.112 due… |
| CVE-2024-6170 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 5.4 | Jul 9 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘email’ parameter in all versions… |
| CVE-2024-6169 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 5.4 | Jul 9 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all… |
| CVE-2024-6166 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 8.8 | Jul 9 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘addons_order’ parameter in all… |
| CVE-2023-31080 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | Jun 9 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor… |
| CVE-2024-5329 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | Jun 6 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parameter in all versions… |
| CVE-2024-35674 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | Jun 5 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects… |
| CVE-2023-33930 | UE Unlimited Elements For Elementor Unlimited-elements | 7.2 | Jun 4 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This… |
| CVE-2024-3190 | UE Unlimited Elements For Elementor Unlimited-elements | 4.6 | May 30 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text field widget in all… |
| CVE-2023-6743 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | May 29 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.89 via… |
| CVE-2024-4779 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | May 23 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up… |
| CVE-2024-3547 | UE Unlimited Elements For Elementor Unlimited-elements | 6.1 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'google_connect_error'… |
| CVE-2024-3055 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to,… |
| CVE-2024-2662 | UE Unlimited Elements For Elementor Unlimited-elements | 7.2 | May 14 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to command injection in all versions up to, and including, 1.5.102 |
| CVE-2023-31090 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | Apr 24 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to… |
| CVE-2024-0367 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Mar 30 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget (e.g., 'Button Link') in all… |
| CVE-2024-29792 | UE Unlimited Elements For Elementor Unlimited-elements | 6.1 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… |
| CVE-2024-1710 | AL Addon Library Unlimited-elements | 8.8 | Feb 26 | The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the onAjaxAction function action in all versions up to,… |
| CVE-2023-31231 | UE Unlimited Elements For Elementor Unlimited-elements | 6.5 | Dec 20 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited… |
| CVE-2023-3295 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | Jun 17 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the… |
| CVE-2022-47170 | UE Unlimited Elements For Elementor Unlimited-elements | 4.8 | Mar 28 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions |