UE
Product
Unlimited Elements For Elementor
27
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 16Low 0
Watch
Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6166 | 8.8 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection Affected: through 1.5.112 |
| CVE-2024-5329 | 8.8 | Jun 6 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter Affected: through 1.5.109 |
| CVE-2023-6743 | 8.8 | May 29 | Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import Affected: through 1.5.89 |
| CVE-2024-4779 | 8.8 | May 23 | Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] Affected: through 1.5.107 |
| CVE-2024-3055 | 8.8 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection Affected: through 1.5.102 |
| CVE-2023-3295 | 8.8 | Jun 17 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload Affected: through 1.5.66 |
| CVE-2026-18561 | 7.5 | Sep 11 | Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection Affected: through 2.0.16 |
| CVE-2026-4659 | 7.5 | Apr 17 | Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal Affected: through 2.0.6 |
| CVE-2026-2724 | 7.2 | Mar 10 | Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields Affected: through 2.0.5 |
| CVE-2025-13692 | 7.2 | Nov 27 | Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload Affected: through 2.0 |
| CVE-2024-2662 | 7.2 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection Affected: through 1.5.102 |
Showing 11
