Unlimited Elements for Elementor vulnerabilities
We track 2 vulnerabilities in Unlimited Elements for Elementor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Unlimited Elements for Elementor vulnerabilities
- 7.5 High severity
Unlimited Elements For Elementor: Deserialization of Untrusted Data
The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level acc
- 8.8 High severity
Unlimited Elements For Elementor: Improper Neutralization of Input During Web Page Generation
The Unlimited Elements For Elementor WordPress plugin before 2.0.11 does not sanitize or escape Google review content fetched from the Serp API before rendering it in the Google Reviews widget output, allowing unauthenticated attackers who submit a malicious r