Unlimited Elements For Elementor (Free Widgets, Addons, Templates) vulnerabilities

Product

Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

by Unlimited Elements · last CVE Oct 28, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 1High 15Medium 13Low 0

Severity

All severities29 Critical1 High15 Medium13 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unlimited Elements For Elementor (Free Widgets, Addons, Templates) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-103355	9.3	0%	Oct 4	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability Affected: through 2.0.20
CVE-2026-95534	8.8	0%	Oct 7	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability Affected: through 2.0.19
CVE-2024-6166	8.8	0%	Jul 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection Affected: before 1.5.113
CVE-2023-31080	8.8	0%	Jun 9	WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability Affected: through 1.5.65
CVE-2024-35674	8.8	0%	Jun 5	WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability Affected: through 1.5.109
CVE-2024-3055	8.8	1%	May 10	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection Affected: through 1.5.102
CVE-2023-31090	8.8	1%	Apr 24	WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability Affected: through 1.5.60
CVE-2026-103338	8.5	0%	Oct 1	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability Affected: through 2.0.20
CVE-2024-49271	7.2	1%	Oct 16	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability Affected: through 1.5.121
CVE-2023-33930	7.2	1%	Jun 4	WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability Affected: through 1.5.66
CVE-2026-115593 New	7.1	–	Oct 28	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.24
CVE-2026-94662	7.1	0%	Oct 7	WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.19
CVE-2026-103344	7.1	0%	Oct 4	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.20
CVE-2026-103342	7.1	0%	Oct 3	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.20
CVE-2026-84820	7.1	0%	Sep 8	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.17
CVE-2026-57718	7.1	0%	Jul 13	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability Affected: through 2.0.12
CVE-2026-105064	6.5	0%	Oct 5	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability Affected: through 2.0.22
CVE-2026-28146	6.5	0%	Aug 6	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability Affected: through 2.0.14
CVE-2023-31231	6.5	1%	Dec 20	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload Affected: through 1.5.65
CVE-2026-66608	6.4	0%	Sep 17	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability Affected: through 2.0.19
CVE-2024-45454	6.1	0%	Oct 6	WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.5.121
CVE-2024-29792	6.1	1%	Mar 27	WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.5.93
CVE-2026-28147	5.4	0%	Aug 3	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability Affected: through 2.0.15
CVE-2024-6169	5.4	1%	Jul 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' Affected: before 1.5.113
CVE-2024-6170	5.4	0%	Jul 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' Affected: before 1.5.113
CVE-2026-103341	5.3	0%	Oct 1	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability Affected: through 2.0.20
CVE-2026-85304	5.3	0%	Sep 3	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability Affected: through 2.0.17
CVE-2024-6171	5.3	0%	Jul 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass Affected: before 1.5.113
CVE-2022-47170	4.8	0%	Mar 28	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS) Affected: through 1.5.48