Unlimited Elements vulnerabilities

We track 17 vulnerabilities in Unlimited Elements products across 2 products. 17 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.

17vulnerabilities

1critical

16high

0exploited

8.0average CVSS score

Latest Unlimited Elements vulnerabilities

7.1 High severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Input During Web Page Generation
CVE-2026-62007Nov 4, 2026Unlimited Elements
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects
7.1 High severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Input During Web Page Generation
CVE-2026-115593Oct 28, 2026Unlimited Elements
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects
8.8 High severity
Unlimited Elements For Elementor (Free…: Deserialization of Untrusted Data
CVE-2026-95534Oct 7, 2026Unlimited Elements
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a th
7.1 High severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Input During Web Page Generation
CVE-2026-94662Oct 7, 2026Unlimited Elements
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Stored XSS. This issue affects Unlimited Elements For Elementor (
9.3 Critical severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-103355Oct 4, 2026Unlimited Elements
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue a
7.1 High severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Input During Web Page Generation
CVE-2026-103344Oct 4, 2026Unlimited Elements
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects
7.1 High severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Input During Web Page Generation
CVE-2026-103342Oct 3, 2026Unlimited Elements
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects
8.5 High severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-103338Oct 1, 2026Unlimited Elements
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue a
7.1 High severity
Unlimited Elements For Elementor (Free…: Improper Neutralization of Input During Web Page Generation
CVE-2026-57718Jul 13, 2026Unlimited Elements
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects
8.5 High severity
Unlimited Elements For Elementor: Improper Neutralization of Special Elements used in an SQL Command
CVE-2026-48837May 25, 2026Unlimited Elements
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elements For Elementor: from n/a through 2.0.8.
7.2 High severity
Unlimited Elements For Elementor (Free…: Improper Control of Generation of Code
CVE-2024-49271Oct 16, 2024Unlimited ElementsEPSS 1.14%
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This issue affects Unlimited Elements For Elementor (Free Widgets
8.8 High severity
Unlimited Elements For Elementor: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-6166Jul 9, 2024Unitecms
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘addons_order’ parameter in all versions up to, and including, 1.5.112 due to insufficient escaping on the user suppli
8.8 High severity
Unlimited Elements For Elementor (Free…: Missing Authorization
CVE-2023-31080Jun 9, 2024Unlimited Elements
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.
8.8 High severity
Unlimited Elements For Elementor (Free…: Missing Authorization
CVE-2024-35674Jun 5, 2024Unlimited Elements
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a throug
7.2 High severity
Unlimited Elements For Elementor (Free…: Unrestricted Upload of File with Dangerous Type
CVE-2023-33930Jun 4, 2024Unlimited Elements
Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates):
8.8 High severity
Unlimited Elements For Elementor: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-3055May 14, 2024Unitecms
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.102 due to insufficient escaping on the user supplied paramet
8.8 High severity
Unlimited Elements For Elementor (Free…: Unrestricted Upload of File with Dangerous Type
CVE-2023-31090Apr 24, 2024Unlimited Elements
Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to a Web Server.This issue affects Unlimited Elements For Elementor (Free Widgets,