Advisories · Technology
unitecms Unlimited Elements for Elementor.
Every CVE that names unitecms Unlimited Elements for Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Unlimited Elements for Elementor <= 2.0.26 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Widget
- unitecms Unlimited Elements for Elementor
- Cross-site scripting (XSS)
- CVSS 7.5 High
Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection
- unitecms Unlimited Elements For Elementor
- SQL injection
- CVSS 6.1 Medium
Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter
- unitecms Unlimited Elements For Elementor
- SQL injection
- CVSS 7.5 High
Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal
- unitecms Unlimited Elements For Elementor
- Path traversal
- CVSS 7.2 High
Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 7.2 High
Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
- unitecms Unlimited Elements for Elementor (Premium)
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 8.8 High
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection
- unitecms Unlimited Elements For Elementor
- SQL injection
- CVSS 5.3 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass
- unitecms Unlimited Elements For Elementor
- CWE-348
- CVSS 8.8 High
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
- unitecms Unlimited Elements For Elementor
- SQL injection
- CVSS 5.4 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 8.8 High
Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import
- unitecms Unlimited Elements For Elementor
- Code injection
- CVSS 8.8 High
Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]
- unitecms Unlimited Elements For Elementor
- SQL injection
- CVSS 8.8 High
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection
- unitecms Unlimited Elements For Elementor
- SQL injection
- CVSS 6.1 Medium
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 7.2 High
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection
- unitecms Unlimited Elements For Elementor
- Command injection
- CVSS 6.4 Medium
Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link
- unitecms Unlimited Elements For Elementor
- Cross-site scripting (XSS)
- CVSS 8.8 High
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload
- unitecms Unlimited Elements For Elementor
- Unrestricted file upload