Unlimited Elements For Elementor

39 known CVEs 300K+ active installs

Scan My Site Free
UNKNOWN: 39
Known Vulnerabilities 39
CVE-2026-4659 UNKNOWN EPSS 0.6%
Published 2026-04-17 · Affected: *
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6. This is due to insuffici
CVE-2026-4659 UNKNOWN EPSS 0.6%
Published 2026-04-17 · Affected: *
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6. This is due to insuffici
CVE-2026-2724 UNKNOWN EPSS 0.3%
Published 2026-03-10 · Affected: *
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form entry fields in all versions up to, and including, 2.0.5. This is due to insufficien
CVE-2025-14274 UNKNOWN EPSS 0.1%
Published 2026-02-03 · Affected: *
The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1. This is due to insufficie
CVE-2025-13692 UNKNOWN EPSS 0.2%
Published 2025-11-27 · Affected: *
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0 due to insufficient input sanitiza
CVE-2024-13153 UNKNOWN EPSS 0.2%
Published 2025-01-09 · Affected: *
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input sani
CVE-2024-13153 UNKNOWN EPSS 0.2%
Published 2025-01-09 · Affected: *
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input sani
CVE-2024-49271 UNKNOWN EPSS 0.6%
Published 2024-10-16 · Affected: *
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This
CVE-2024-49271 UNKNOWN EPSS 0.6%
Published 2024-10-16 · Affected: *
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This
CVE-2024-49271 UNKNOWN EPSS 0.6%
Published 2024-10-16 · Affected: *
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This
CVE-2024-49271 UNKNOWN EPSS 0.6%
Published 2024-10-16 · Affected: *
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This
CVE-2024-45454 UNKNOWN EPSS 0.2%
Published 2024-10-06 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el
CVE-2024-45454 UNKNOWN EPSS 0.2%
Published 2024-10-06 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el
CVE-2024-45454 UNKNOWN EPSS 0.2%
Published 2024-10-06 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el
CVE-2024-45454 UNKNOWN EPSS 0.2%
Published 2024-10-06 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el
CVE-2024-5329 UNKNOWN EPSS 0.4%
Published 2024-06-06 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parameter in all versions up to, and including,
CVE-2024-5329 UNKNOWN EPSS 0.4%
Published 2024-06-06 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parameter in all versions up to, and including,
CVE-2024-35674 UNKNOWN EPSS 0.3%
Published 2024-06-05 · Affected: *
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For
CVE-2024-35674 UNKNOWN EPSS 0.3%
Published 2024-06-05 · Affected: *
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For
CVE-2024-35674 UNKNOWN EPSS 0.3%
Published 2024-06-05 · Affected: *
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For
CVE-2024-35674 UNKNOWN EPSS 0.3%
Published 2024-06-05 · Affected: *
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For
CVE-2024-3190 UNKNOWN EPSS 0.2%
Published 2024-05-30 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text field widget in all versions up to, and i
CVE-2024-3190 UNKNOWN EPSS 0.2%
Published 2024-05-30 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's text field widget in all versions up to, and i
CVE-2023-6743 UNKNOWN EPSS 0.7%
Published 2024-05-29 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.89 via the template import
CVE-2023-6743 UNKNOWN EPSS 0.7%
Published 2024-05-29 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.89 via the template import
CVE-2024-4779 UNKNOWN EPSS 0.4%
Published 2024-05-23 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up to, and including, 1
CVE-2024-4779 UNKNOWN EPSS 0.4%
Published 2024-05-23 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up to, and including, 1
CVE-2024-3547 UNKNOWN EPSS 0.3%
Published 2024-05-14 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'google_connect_error' parameter in all versions up
CVE-2024-3547 UNKNOWN EPSS 0.3%
Published 2024-05-14 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'google_connect_error' parameter in all versions up
CVE-2024-3055 UNKNOWN EPSS 0.5%
Published 2024-05-14 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.1
CVE-2024-3055 UNKNOWN EPSS 0.5%
Published 2024-05-14 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.1
CVE-2024-2662 UNKNOWN EPSS 0.8%
Published 2024-05-14 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to command injection in all versions up to, and including, 1.5.102. This is due to insufficien
CVE-2024-2662 UNKNOWN EPSS 0.8%
Published 2024-05-14 · Affected: *
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to command injection in all versions up to, and including, 1.5.102. This is due to insufficien
CVE-2024-0367 UNKNOWN EPSS 0.3%
Published 2024-03-30 · Affected: *
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget (e.g., 'Button Link') in all versions up to, and includ
CVE-2024-0367 UNKNOWN EPSS 0.3%
Published 2024-03-30 · Affected: *
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget (e.g., 'Button Link') in all versions up to, and includ
CVE-2024-29792 UNKNOWN EPSS 0.5%
Published 2024-03-27 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el
CVE-2024-29792 UNKNOWN EPSS 0.5%
Published 2024-03-27 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el
CVE-2024-29792 UNKNOWN EPSS 0.5%
Published 2024-03-27 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el
CVE-2024-29792 UNKNOWN EPSS 0.5%
Published 2024-03-27 · Affected: *
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-el

Is Unlimited Elements For Elementor running on your site?

A free scan detects your plugins and flags any that match these CVEs.

Scan My Site Free