Unlimited Elements vulnerabilities

24 vulnerabilities

Known vulnerabilities in Unlimited Elements products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
5.9CVE-2022-47170unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+2
EPSS score
0.39%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions.
7.1CVE-2024-29792unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+2
EPSS score
0.74%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.93.
7.1CVE-2024-45454unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+2
EPSS score
0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.121.
9.1CVE-2024-49271unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+2
EPSS score
1.14%
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.121.
8.8CVE-2024-35674unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+2
EPSS score
0.37%
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.109.
6.5CVE-2026-105064unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.24%
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.22.
7.2CVE-2026-84820unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.
8.5CVE-2026-48837unlimited elementsunlimited elements for elementor+1
EPSS score
0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elements For Elementor: from n/a through 2.0.8.
5.3CVE-2026-103341unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.19%
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
9.3CVE-2026-103355unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.25%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
8.5CVE-2026-103338unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.21%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
7.1CVE-2026-103342unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.15%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
7.1CVE-2026-103344unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.15%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
6.4CVE-2026-66608unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.23%
Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.
7.2CVE-2026-57718unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 2.0.12.
7.2CVE-2026-94662unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.15%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Stored XSS. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.
8.8CVE-2026-95534unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.29%
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.
5.4CVE-2026-28147unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.29%
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15.
6.5CVE-2026-28146unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.44%
Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions.
5.3CVE-2026-85304unlimited elementsunlimited elements for elementor (free widgets, addons, templates)+1
EPSS score
0.31%
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.17.