Login Request a demo
UE
Product
Unlimited Elements For Elementor
by unitecms · last CVE Sep 11, 2026
27
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 0High 11Medium 16Low 0
Severity
All severities27Critical0High11Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6166
8.8
0%
Jul 9
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
Affected: through 1.5.112
CVE-2024-5329
8.8
1%
Jun 6
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
Affected: through 1.5.109
CVE-2023-6743
8.8
1%
May 29
Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import
Affected: through 1.5.89
CVE-2024-4779
8.8
0%
May 23
Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]
Affected: through 1.5.107
CVE-2024-3055
8.8
1%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection
Affected: through 1.5.102
CVE-2023-3295
8.8
1%
Jun 17
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
Affected: through 1.5.66
CVE-2026-18561
7.5
1%
Sep 11
Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection
Affected: through 2.0.16
CVE-2026-4659
7.5
1%
Apr 17
Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal
Affected: through 2.0.6
CVE-2026-2724
7.2
0%
Mar 10
Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields
Affected: through 2.0.5
CVE-2025-13692
7.2
0%
Nov 27
Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Affected: through 2.0
CVE-2024-2662
7.2
2%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection
Affected: through 1.5.102
CVE-2026-5486
6.5
0%
May 14
Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter
Affected: through 2.0.7
CVE-2025-8603
6.4
0%
Aug 28
Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.5.148
CVE-2026-77150
6.1
0%
Sep 11
Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting
Affected: through 2.0.16
CVE-2026-75586
6.1
0%
Sep 5
Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter
Affected: through 2.0.17
CVE-2024-13362
6.1
0%
May 1
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Affected: through 1.5.140
CVE-2024-3547
6.1
0%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting
Affected: through 1.5.102
CVE-2025-14274
5.4
0%
Feb 3
Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
Affected: through 2.0.1
CVE-2025-1663
5.4
0%
Apr 3
Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.5.142
CVE-2024-13155
5.4
0%
Feb 20
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget
Affected: through 1.5.140
CVE-2024-13153
5.4
0%
Jan 9
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Affected: through 1.5.135
CVE-2024-10784
5.4
0%
Dec 12
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.5.126
CVE-2024-6169
5.4
1%
Jul 9
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'
Affected: through 1.5.112
CVE-2024-6170
5.4
0%
Jul 9
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'
Affected: through 1.5.112
CVE-2024-0367
5.4
0%
Mar 30
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
Affected: through 1.5.96
CVE-2024-6171
5.3
0%
Jul 9
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass
Affected: through 1.5.112
CVE-2024-3190
4.6
0%
May 30
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Affected: through 1.5.107
Showing 27