Unlimited Elements For Elementor vulnerabilities | LiveThreat CVE Feed

Product

Unlimited Elements For Elementor

by Unlimited Elements · last CVE May 25, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 0High 12Medium 11Low 0

Severity

All severities23 Critical0 High12 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Unlimited Elements For Elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-31231	6.5	1%	Dec 20	WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload Affected: before 1.5.66
CVE-2024-45454	6.1	0%	Oct 6	WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability Affected: before 1.5.122
CVE-2024-3547	6.1	0%	May 10	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting Affected: before 1.5.103
CVE-2024-29792	6.1	1%	Mar 27	WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability Affected: before 1.5.95
CVE-2025-1663	5.4	0%	Apr 3	Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.5.142
CVE-2024-13155	5.4	0%	Feb 20	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget Affected: before 1.5.141
CVE-2024-13153	5.4	0%	Jan 9	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Affected: before 1.5.136
CVE-2024-10784	5.4	0%	Dec 12	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 1.5.127
CVE-2024-0367	5.4	0%	Mar 30	Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link Affected: through 1.5.96
CVE-2022-47170	4.8	0%	Mar 28	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions Affected: before 1.5.49
CVE-2024-3190	4.6	0%	May 30	Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field Affected: before 1.5.108