Login Request a demo
UE
Product
Unlimited Elements For Elementor
by Unlimited Elements · last CVE May 25, 2026
23
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 0High 12Medium 11Low 0
Severity
All severities23Critical0High12Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-31080
8.8
0%
Jun 9
WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability
Affected: before 1.5.66
CVE-2024-5329
8.8
1%
Jun 6
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
Affected: before 1.5.110
CVE-2024-35674
8.8
0%
Jun 5
WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability
Affected: before 1.5.110
CVE-2023-6743
8.8
1%
May 29
Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import
Affected: through 1.5.89
CVE-2024-4779
8.8
0%
May 23
Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]
Affected: before 1.5.108
CVE-2024-3055
8.8
1%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection
Affected: before 1.5.105
CVE-2023-31090
8.8
1%
Apr 24
WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability
Affected: before 1.5.61
CVE-2023-3295
8.8
1%
Jun 17
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the…
Affected: before 1.5.67
CVE-2026-48837
8.5
0%
May 25
WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability
Affected: through 2.0.8
CVE-2024-49271
7.2
1%
Oct 16
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability
Affected: before 1.5.122
CVE-2023-33930
7.2
1%
Jun 4
WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability
Affected: before 1.5.67
CVE-2024-2662
7.2
2%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection
Affected: before 1.5.103
CVE-2023-31231
6.5
1%
Dec 20
Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited…
Affected: before 1.5.66
CVE-2024-45454
6.1
0%
Oct 6
WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: before 1.5.122
CVE-2024-3547
6.1
0%
May 10
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting
Affected: before 1.5.103
CVE-2024-29792
6.1
1%
Mar 27
WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: before 1.5.95
CVE-2025-1663
5.4
0%
Apr 3
Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.5.142
CVE-2024-13155
5.4
0%
Feb 20
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget
Affected: before 1.5.141
CVE-2024-13153
5.4
0%
Jan 9
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Affected: before 1.5.136
CVE-2024-10784
5.4
0%
Dec 12
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.5.127
CVE-2024-0367
5.4
0%
Mar 30
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
Affected: through 1.5.96
CVE-2022-47170
4.8
0%
Mar 28
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions
Affected: before 1.5.49
CVE-2024-3190
4.6
0%
May 30
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Affected: before 1.5.108
Showing 23