UN
Vendor
unitecms
32
CVEs
0
On KEV
0
New 30D
Products
UE8.8
Unlimited Elements For Elementor
unitecms
27 CVEs0 on KEV0 new
AL8.8
Addon Library
unitecms
1 CVEs0 on KEV0 new
BP8.8
Blox Page Builder
unitecms
1 CVEs0 on KEV0 new
DC8.8
Doubly โ Cross Domain Copy Paste for WordPress
unitecms
1 CVEs0 on KEV0 new
UA7.2
Unlimited Addons for WPBakery Page Builder
unitecms
1 CVEs0 on KEV0 new
UE7.2
Unlimited Elements for Elementor (Premium)
unitecms
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-18561 | UE Unlimited Elements For Elementor unitecms | 7.5 | Sep 11 | Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection |
| CVE-2026-77150 | UE Unlimited Elements For Elementor unitecms | 6.1 | Sep 11 | Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting |
| CVE-2026-75586 | UE Unlimited Elements For Elementor unitecms | 6.1 | Sep 5 | Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter |
| CVE-2026-5486 | UE Unlimited Elements For Elementor unitecms | 6.5 | May 14 | Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter |
| CVE-2024-13362 | UE Unlimited Elements For Elementor unitecms | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2026-4659 | UE Unlimited Elements For Elementor unitecms | 7.5 | Apr 17 | Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal |
| CVE-2026-2724 | UE Unlimited Elements For Elementor unitecms | 7.2 | Mar 10 | Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields |
| CVE-2025-14274 | UE Unlimited Elements For Elementor unitecms | 5.4 | Feb 3 | Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget |
| CVE-2025-14476 | DC Doubly โ Cross Domain Copy Paste for WordPress unitecms | 8.8 | Dec 13 | Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import |
| CVE-2025-13692 | UE Unlimited Elements For Elementor unitecms | 7.2 | Nov 27 | Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload |
| CVE-2025-8603 | UE Unlimited Elements For Elementor unitecms | 6.4 | Aug 28 | Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-1663 | UE Unlimited Elements For Elementor unitecms | 5.4 | Apr 3 | Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13155 | UE Unlimited Elements For Elementor unitecms | 5.4 | Feb 20 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget |
| CVE-2024-13153 | UE Unlimited Elements For Elementor unitecms | 5.4 | Jan 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2024-10784 | UE Unlimited Elements For Elementor unitecms | 5.4 | Dec 12 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-6315 | BP Blox Page Builder unitecms | 8.8 | Aug 6 | Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload |
| CVE-2024-6169 | UE Unlimited Elements For Elementor unitecms | 5.4 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' |
| CVE-2024-6170 | UE Unlimited Elements For Elementor unitecms | 5.4 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' |
| CVE-2024-6166 | UE Unlimited Elements For Elementor unitecms | 8.8 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection |
| CVE-2024-6171 | UE Unlimited Elements For Elementor unitecms | 5.3 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass |
| CVE-2024-5329 | UE Unlimited Elements For Elementor unitecms | 8.8 | Jun 6 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter |
| CVE-2024-3190 | UE Unlimited Elements For Elementor unitecms | 4.6 | May 30 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field |
| CVE-2023-6743 | UE Unlimited Elements For Elementor unitecms | 8.8 | May 29 | Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import |
| CVE-2024-4779 | UE Unlimited Elements For Elementor unitecms | 8.8 | May 23 | Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] |
| CVE-2024-3055 | UE Unlimited Elements For Elementor unitecms | 8.8 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection |
| CVE-2024-3547 | UE Unlimited Elements For Elementor unitecms | 6.1 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting |
| CVE-2024-2662 | UE Unlimited Elements For Elementor unitecms | 7.2 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection |
| CVE-2024-0367 | UE Unlimited Elements For Elementor unitecms | 5.4 | Mar 30 | Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link |
| CVE-2024-1710 | AL Addon Library unitecms | 8.8 | Feb 24 | Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2023-6925 | UA Unlimited Addons for WPBakery Page Builder unitecms | 7.2 | Feb 5 | Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload |
| CVE-2023-3295 | UE Unlimited Elements For Elementor unitecms | 8.8 | Jun 17 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload |
