UE
Product
Unlimited Elements For Elementor
by unitecms · last CVE Sep 11, 2026
27
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 16Low 0
Watch

Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6166
8.8
0%
Jul 9
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
Affected: through 1.5.112
CVE-2024-5329
8.8
1%
Jun 6
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
Affected: through 1.5.109
CVE-2023-6743
8.8
1%
May 29
Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import
Affected: through 1.5.89
CVE-2024-4779
8.8
0%
May 23
Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]
Affected: through 1.5.107
CVE-2024-3055
8.8
1%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection
Affected: through 1.5.102
CVE-2023-3295
8.8
1%
Jun 17
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
Affected: through 1.5.66
CVE-2026-18561
7.5
1%
Sep 11
Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection
Affected: through 2.0.16
CVE-2026-4659
7.5
1%
Apr 17
Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal
Affected: through 2.0.6
CVE-2026-2724
7.2
0%
Mar 10
Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields
Affected: through 2.0.5
CVE-2025-13692
7.2
0%
Nov 27
Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Affected: through 2.0
CVE-2024-2662
7.2
2%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection
Affected: through 1.5.102
Showing 11