Advisories · Technology

Unlimited Elements For Elementor (Free Widgets, Addons, Templates).

Every CVE that names Unlimited Elements For Elementor (Free Widgets, Addons, Templates) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-62007 CVE record

CVSS 7.1 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2026
CVE-2026-62023 CVE record

CVSS 4.3 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-62121 CVE record

CVSS 6.5 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- File inclusion
Not analysed yet 30 Oct 2026
CVE-2026-115593 CVE record

CVSS 7.1 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2026
CVE-2026-95534 CVE record

CVSS 8.8 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Insecure deserialization
Not analysed yet 7 Oct 2026
CVE-2026-94662 CVE record

CVSS 7.1 High

WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2026
CVE-2026-105064 CVE record

CVSS 6.5 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Code injection
Not analysed yet 5 Oct 2026
CVE-2026-103355 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- SQL injection
Not analysed yet 4 Oct 2026
CVE-2026-103344 CVE record

CVSS 7.1 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 4 Oct 2026
CVE-2026-103342 CVE record

CVSS 7.1 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 3 Oct 2026
CVE-2026-103341 CVE record

CVSS 5.3 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Broken access control
Not analysed yet 1 Oct 2026
CVE-2026-103338 CVE record

CVSS 8.5 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- SQL injection
Not analysed yet 1 Oct 2026
CVE-2026-66608 CVE record

CVSS 6.4 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Server-side request forgery (SSRF)
Not analysed yet 17 Sept 2026
CVE-2026-84820 CVE record

CVSS 7.1 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 8 Sept 2026
CVE-2026-85304 CVE record

CVSS 5.3 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-28146 CVE record

CVSS 6.5 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Path traversal
Not analysed yet 6 Aug 2026
CVE-2026-28147 CVE record

CVSS 5.4 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Broken access control
Not analysed yet 3 Aug 2026
CVE-2026-57718 CVE record

CVSS 7.1 High

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 13 Jul 2026
CVE-2024-49271 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- CWE-82
Not analysed yet 16 Oct 2024
CVE-2024-45454 CVE record

CVSS 7.1 High

WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 6 Oct 2024
CVE-2023-31080 CVE record

CVSS 8.3 High

WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Broken access control
Not analysed yet 9 Jun 2024
CVE-2024-35674 CVE record

CVSS 4.3 Medium

WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Broken access control
Not analysed yet 5 Jun 2024
CVE-2023-33930 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Unrestricted file upload
Not analysed yet 4 Jun 2024
CVE-2023-31090 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Unrestricted file upload
Not analysed yet 24 Apr 2024
CVE-2024-29792 CVE record

CVSS 7.1 High

WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2023-31231 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Unrestricted file upload
Not analysed yet 20 Dec 2023
CVE-2022-47170 CVE record

CVSS 5.9 Medium

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS)
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2023