Unlimited Elements For Elementor vulnerabilities | LiveThreat CVE Feed

Product

Unlimited Elements For Elementor

by Unlimited Elements · last CVE May 25, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 0High 12Medium 11Low 0

Severity

All severities23 Critical0 High12 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-31080	8.8	0%	Jun 9	WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability Affected: before 1.5.66
CVE-2024-5329	8.8	1%	Jun 6	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter Affected: before 1.5.110
CVE-2024-35674	8.8	0%	Jun 5	WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability Affected: before 1.5.110
CVE-2023-6743	8.8	1%	May 29	Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import Affected: through 1.5.89
CVE-2024-4779	8.8	0%	May 23	Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] Affected: before 1.5.108
CVE-2024-3055	8.8	1%	May 10	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection Affected: before 1.5.105
CVE-2023-31090	8.8	1%	Apr 24	WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability Affected: before 1.5.61
CVE-2023-3295	8.8	1%	Jun 17	The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the… Affected: before 1.5.67
CVE-2026-48837	8.5	0%	May 25	WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability Affected: through 2.0.8
CVE-2024-49271	7.2	1%	Oct 16	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability Affected: before 1.5.122
CVE-2023-33930	7.2	1%	Jun 4	WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability Affected: before 1.5.67
CVE-2024-2662	7.2	2%	May 10	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection Affected: before 1.5.103