UN
Vendor
unitecms
6 products with CVEs on record
32
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-18561
UE
Unlimited Elements For Elementor
unitecms
7.5
1%
Sep 11Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection
CVE-2026-77150
UE
Unlimited Elements For Elementor
unitecms
6.1
0%
Sep 11Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting
CVE-2026-75586
UE
Unlimited Elements For Elementor
unitecms
6.1
0%
Sep 5Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter
CVE-2026-5486
UE
Unlimited Elements For Elementor
unitecms
6.5
0%
May 14Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter
CVE-2024-13362
UE
Unlimited Elements For Elementor
unitecms
6.1
0%
May 1Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2026-4659
UE
Unlimited Elements For Elementor
unitecms
7.5
1%
Apr 17Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal
CVE-2026-2724
UE
Unlimited Elements For Elementor
unitecms
7.2
0%
Mar 10Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields
CVE-2025-14274
UE
Unlimited Elements For Elementor
unitecms
5.4
0%
Feb 3Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
CVE-2025-14476
DC
Doubly โ€“ Cross Domain Copy Paste for WordPress
unitecms
8.8
1%
Dec 13Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import
CVE-2025-13692
UE
Unlimited Elements For Elementor
unitecms
7.2
0%
Nov 27Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
CVE-2025-8603
UE
Unlimited Elements For Elementor
unitecms
6.4
0%
Aug 28Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1663
UE
Unlimited Elements For Elementor
unitecms
5.4
0%
Apr 3Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13155
UE
Unlimited Elements For Elementor
unitecms
5.4
0%
Feb 20Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget
CVE-2024-13153
UE
Unlimited Elements For Elementor
unitecms
5.4
0%
Jan 9Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
CVE-2024-10784
UE
Unlimited Elements For Elementor
unitecms
5.4
0%
Dec 12Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-6315
BP
Blox Page Builder
unitecms
8.8
1%
Aug 6Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2024-6169
UE
Unlimited Elements For Elementor
unitecms
5.4
1%
Jul 9Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'
CVE-2024-6170
UE
Unlimited Elements For Elementor
unitecms
5.4
0%
Jul 9Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'
CVE-2024-6166
UE
Unlimited Elements For Elementor
unitecms
8.8
0%
Jul 9Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
CVE-2024-6171
UE
Unlimited Elements For Elementor
unitecms
5.3
0%
Jul 9Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass
CVE-2024-5329
UE
Unlimited Elements For Elementor
unitecms
8.8
1%
Jun 6Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
CVE-2024-3190
UE
Unlimited Elements For Elementor
unitecms
4.6
0%
May 30Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
CVE-2023-6743
UE
Unlimited Elements For Elementor
unitecms
8.8
1%
May 29Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import
CVE-2024-4779
UE
Unlimited Elements For Elementor
unitecms
8.8
0%
May 23Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]
CVE-2024-3055
UE
Unlimited Elements For Elementor
unitecms
8.8
1%
May 10Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection
CVE-2024-3547
UE
Unlimited Elements For Elementor
unitecms
6.1
0%
May 10Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting
CVE-2024-2662
UE
Unlimited Elements For Elementor
unitecms
7.2
2%
May 10Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection
CVE-2024-0367
UE
Unlimited Elements For Elementor
unitecms
5.4
0%
Mar 30Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
CVE-2024-1710
AL
Addon Library
unitecms
8.8
1%
Feb 24Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
CVE-2023-6925
UA
Unlimited Addons for WPBakery Page Builder
unitecms
7.2
1%
Feb 5Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload
CVE-2023-3295
UE
Unlimited Elements For Elementor
unitecms
8.8
1%
Jun 17Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload