Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

46 records

Vendor: Unlimited Elements Clear all filters
TI-2026-84984 CVE-2026-62007 · GHSA-x4c3-5562-wh3h

Reflected cross-site scripting in Unlimited Elements For Elementor

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00146 Published 2026-11-04 No fix listed CWE-79
TI-2026-83271 CVE-2026-62023 · GHSA-gpwx-7vmq-49fc

Missing authorization in Unlimited Elements For Elementor plugin

Priority LOW 20

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Securi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0025 Published 2026-10-30 No fix listed CWE-862
TI-2026-83275 CVE-2026-62121 · GHSA-7352-x4h3-95fw

Local file inclusion in Unlimited Elements For Elementor plugin

Priority LOW 29

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-ele…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00408 Published 2026-10-30 No fix listed CWE-98
TI-2026-81966 CVE-2026-115593 · GHSA-m34p-7vh9-xj6h

Reflected XSS in Unlimited Elements For Elementor WordPress plugin

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0019 Published 2026-10-28 No fix listed CWE-79
TI-2026-69250 CVE-2026-95534 · GHSA-5v8m-ppqr-qj2h

PHP object injection in Unlimited Elements For Elementor plugin

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00279 Published 2026-10-07 No fix listed CWE-502
TI-2026-69248 CVE-2026-94662 · GHSA-mwrm-433x-r42p

Stored cross-site scripting in Unlimited Elements For Elementor

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Stored XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-07 No fix listed CWE-79
TI-2026-67666 CVE-2026-105064 · GHSA-2ff7-6h2m-wxm2

Unsafe reflection in Unlimited Elements For Elementor plugin

Priority LOW 28

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00236 Published 2026-10-05 No fix listed CWE-470
TI-2026-67526 CVE-2026-103355 · GHSA-rcjh-9qxp-82pg

SQL injection in Unlimited Elements For Elementor

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00382 Published 2026-10-04 No fix listed CWE-89
TI-2026-67524 CVE-2026-103344 · GHSA-h349-fxgq-c583

Cross-site scripting in Unlimited Elements For Elementor

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00145 Published 2026-10-04 No fix listed CWE-79
TI-2026-67486 CVE-2026-103342 · GHSA-j3m5-w9gh-35hx

Cross-site scripting in Unlimited Elements For Elementor

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-03 No fix listed CWE-79
TI-2026-65673 CVE-2026-103341 · GHSA-m6c5-qfqj-wmrv

Missing authorization in Unlimited Elements For Elementor

Priority LOW 29

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Securi…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00187 Published 2026-10-01 No fix listed CWE-862
TI-2026-65670 CVE-2026-103338 · GHSA-pvr6-p3c8-gprf

SQL injection in Unlimited Elements For Elementor

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00205 Published 2026-10-01 No fix listed CWE-89
TI-2026-47279 CVE-2026-66608 · GHSA-gprx-48qq-vxqr

Server-side request forgery in Unlimited Elements For Elementor

Priority LOW 28

Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0023 Published 2026-09-17 No fix listed CWE-918
TI-2026-58317 CVE-2026-84820 · GHSA-pmv9-cx7p-8m6f

Cross-site scripting in Unlimited Elements For Elementor

Priority LOW 31

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-09-08 No fix listed CWE-79
TI-2026-58575 CVE-2026-85304 · GHSA-mq9j-25qj-fq8w

Missing authorization in Unlimited Elements For Elementor

Priority LOW 30

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-09-03 No fix listed CWE-862
TI-2026-22487 CVE-2026-28146 · GHSA-rc6c-xxc7-jg93

Path traversal in Unlimited Elements For Elementor

Priority LOW 29

Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00443 Published 2026-08-06 No fix listed CWE-22
TI-2026-22488 CVE-2026-28147 · GHSA-crjc-75c2-rpr6

Missing authorization in Unlimited Elements For Elementor

Priority LOW 24

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-08-03 No fix listed CWE-862
TI-2026-41542 CVE-2026-57718 · GHSA-rmwr-px9v-jfjj

Cross-site scripting in Unlimited Elements For Elementor

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
TI-2025-01429 CVE-2025-1663 · GHSA-m8v6-vwmg-r6jr

Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.142 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00233 Published 2025-04-03 No fix listed CWE-79
TI-2024-12201 CVE-2024-13155 · GHSA-qf3h-q4g6-359h

Cross-site scripting in unitecms Unlimited Elements For Elementor

Priority LOW 28

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient inpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00352 Published 2025-02-20 No fix listed CWE-79
TI-2024-12200 CVE-2024-13153 · GHSA-hjvv-3pww-4pmf

Cross-site scripting in unitecms Unlimited Elements For Elementor

Priority LOW 28

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00322 Published 2025-01-09 No fix listed CWE-79
TI-2024-09996 CVE-2024-10784 · GHSA-86gp-wcx2-jcwm

Cross-site scripting in unitecms Unlimited Elements For Elementor

Priority LOW 28

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Tile Gallery' widget in all versions up to, and including, 1.5.126 due to…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00354 Published 2024-12-12 No fix listed CWE-79
TI-2024-32864 CVE-2024-49271 · GHSA-g783-p3gp-4q89

Code injection in Unlimited Elements For Elementor

Priority MEDIUM 44

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This issue affects Unlimi…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01137 Published 2024-10-16 No fix listed CWE-82
TI-2024-30497 CVE-2024-45454 · GHSA-f4wg-2p4x-f6g5

WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-10-06 No fix listed CWE-79
Load more