9.1
Critique
CVE-2024-49271 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets,…
Description
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.121.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Unlimited Elements For Elementor (Free Widgets, Addons, Templates) 1.5 | premières → 1.5.121 | Pas de correctif indiqué |
| unlimited_elements_for_elementor_\(free_widgets\,_addons\,_templates\) 1.5 | premières → 1.5.121 | Pas de correctif indiqué |
Autres CVE de Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Les 27 CVE de Unlimited Elements For Elementor (Free Widgets, Addons, Templates) →
CVE-2026-62007
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerability
7.1
Élevée
CVE-2026-62023
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,…
4.3
Moyenne
CVE-2026-62121
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
6.5
Moyenne
CVE-2026-115593
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements…
7.1
Élevée