Read the docs

Unlimited Elements

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

Unlimited Elements records in CISA KEV

No Unlimited Elements vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Unlimited Elements For Elementor 22 records MEDIUM Unlimited Elements For Elementor (free Widgets, Addons, Templates) 4 records MEDIUM Addon Library 1 record MEDIUM

Records

4 records in Unlimited Elements For Elementor (free Widgets, Addons, Templates) · all components

TI-2024-05715 CVE-2024-6166 · GHSA-r96c-qqg3-j853

SQL injection in unitecms Unlimited Elements For Elementor

Priority MEDIUM 41

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘addons_order’ parameter in all versions up to, and including, 1.5.112 due to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00498 Published 2024-07-09 No fix listed CWE-89
TI-2024-05720 CVE-2024-6171 · GHSA-wmw4-vj25-rfxw

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass

Priority LOW 30

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 1.5.112 due to insufficient IP address validation and…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00247 Published 2024-07-09 No fix listed CWE-348
TI-2024-05719 CVE-2024-6170 · GHSA-pqmq-325c-cfxg

Cross-site scripting in unitecms Unlimited Elements For Elementor

Priority LOW 29

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘email’ parameter in all versions up to, and including, 1.5.112 due to insu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00473 Published 2024-07-09 No fix listed CWE-79
TI-2024-05718 CVE-2024-6169 · GHSA-5fpx-69w7-fx2q

Cross-site scripting in unitecms Unlimited Elements For Elementor

Priority LOW 29

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.5.112 due to i…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0051 Published 2024-07-09 No fix listed CWE-79
Open these records in search →