UE
Vendor
Unlimited Elements
51
CVEs
0
On KEV
9
New 30D
Products
UE9.3
Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Unlimited Elements
27 CVEs0 on KEV9 new
UE8.8
Unlimited Elements For Elementor
Unlimited Elements
23 CVEs0 on KEV0 new
AL8.8
Addon Library
Unlimited-elements
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115593 New | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 28 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-95534 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 8.8 | Oct 7 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability |
| CVE-2026-94662 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 7 | WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-105064 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.5 | Oct 5 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability |
| CVE-2026-103355 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 9.3 | Oct 4 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability |
| CVE-2026-103344 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 4 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-103342 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Oct 3 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-103341 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 5.3 | Oct 1 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability |
| CVE-2026-103338 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 8.5 | Oct 1 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability |
| CVE-2026-66608 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.4 | Sep 17 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-84820 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Sep 8 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-85304 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 5.3 | Sep 3 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability |
| CVE-2026-28146 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.5 | Aug 6 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability |
| CVE-2026-28147 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 5.4 | Aug 3 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability |
| CVE-2026-57718 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.1 | Jul 13 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-48837 | UE Unlimited Elements For Elementor Unlimited Elements | 8.5 | May 25 | WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability |
| CVE-2025-1663 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Apr 3 | Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13155 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Feb 20 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget |
| CVE-2024-13153 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Jan 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2024-10784 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Dec 12 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-49271 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.2 | Oct 16 | WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability |
| CVE-2024-45454 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.1 | Oct 6 | WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-6169 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 5.4 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' |
| CVE-2024-6170 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 5.4 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' |
| CVE-2024-6166 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 8.8 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection |
| CVE-2024-6171 | UE Unlimited Elements For Elementor (free Widgets, Addons, Templates) Unlimited-elements | 5.3 | Jul 9 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass |
| CVE-2023-31080 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 8.8 | Jun 9 | WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability |
| CVE-2024-5329 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | Jun 6 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter |
| CVE-2024-35674 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 8.8 | Jun 5 | WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability |
| CVE-2023-33930 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 7.2 | Jun 4 | WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability |
| CVE-2024-3190 | UE Unlimited Elements For Elementor Unlimited-elements | 4.6 | May 30 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field |
| CVE-2023-6743 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | May 29 | Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import |
| CVE-2024-4779 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | May 23 | Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] |
| CVE-2024-3055 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection |
| CVE-2024-3547 | UE Unlimited Elements For Elementor Unlimited-elements | 6.1 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting |
| CVE-2024-2662 | UE Unlimited Elements For Elementor Unlimited-elements | 7.2 | May 10 | Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection |
| CVE-2023-31090 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 8.8 | Apr 24 | WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability |
| CVE-2024-0367 | UE Unlimited Elements For Elementor Unlimited-elements | 5.4 | Mar 30 | Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link |
| CVE-2024-29792 | UE Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Unlimited Elements | 6.1 | Mar 27 | WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1710 | AL Addon Library Unlimited-elements | 8.8 | Feb 24 | Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2023-31231 | UE Unlimited Elements For Elementor Unlimited-elements | 6.5 | Dec 20 | Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited… |
| CVE-2023-3295 | UE Unlimited Elements For Elementor Unlimited-elements | 8.8 | Jun 17 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the… |
| CVE-2022-47170 | UE Unlimited Elements For Elementor Unlimited-elements | 4.8 | Mar 28 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions |