Unlimited Elements For Elementor (Free Widgets, Addons, Templates) vulnerabilities

Product

Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

by Unlimited Elements · last CVE Oct 28, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 1High 15Medium 13Low 0

Severity

All severities29 Critical1 High15 Medium13 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unlimited Elements For Elementor (Free Widgets, Addons, Templates) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-105064	6.5	0%	Oct 5	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability Affected: through 2.0.22
CVE-2026-28146	6.5	0%	Aug 6	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability Affected: through 2.0.14
CVE-2023-31231	6.5	1%	Dec 20	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload Affected: through 1.5.65
CVE-2026-66608	6.4	0%	Sep 17	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability Affected: through 2.0.19
CVE-2024-45454	6.1	0%	Oct 6	WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.5.121
CVE-2024-29792	6.1	1%	Mar 27	WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.5.93
CVE-2026-28147	5.4	0%	Aug 3	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability Affected: through 2.0.15
CVE-2024-6169	5.4	1%	Jul 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' Affected: before 1.5.113
CVE-2024-6170	5.4	0%	Jul 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' Affected: before 1.5.113
CVE-2026-103341	5.3	0%	Oct 1	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability Affected: through 2.0.20
CVE-2026-85304	5.3	0%	Sep 3	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability Affected: through 2.0.17
CVE-2024-6171	5.3	0%	Jul 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass Affected: before 1.5.113
CVE-2022-47170	4.8	0%	Mar 28	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS) Affected: through 1.5.48