Skip to content

Known vulnerabilities in Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

Is your version affected?

CVE Summary Score Published
CVE-2026-62007 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerability 7.1 High Nov 4, 2026
CVE-2026-62023 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… 4.3 Medium Oct 30, 2026
CVE-2026-62121 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 6.5 Medium Oct 30, 2026
CVE-2026-115593 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements… 7.1 High Oct 28, 2026
CVE-2026-95534 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets,… 8.8 High Oct 7, 2026
CVE-2026-94662 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements… 7.1 High Oct 7, 2026
CVE-2026-105064 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements… 6.5 Medium Oct 5, 2026
CVE-2026-103344 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements… 7.1 High Oct 4, 2026
CVE-2026-103355 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements… 9.3 Critical Oct 4, 2026
CVE-2026-103342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements… 7.1 High Oct 3, 2026
CVE-2026-103341 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… 5.3 Medium Oct 1, 2026
CVE-2026-103338 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements… 8.5 High Oct 1, 2026
CVE-2026-66608 Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons,… 6.4 Medium Sep 17, 2026
CVE-2026-84820 Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons,… 7.1 High Sep 8, 2026
CVE-2026-85304 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… 5.3 Medium Sep 3, 2026
CVE-2026-28146 Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons,… 6.5 Medium Aug 6, 2026
CVE-2026-28147 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… 5.4 Medium Aug 3, 2026
CVE-2026-57718 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements… 7.1 High Jul 13, 2026
CVE-2024-49271 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets,… 9.1 Critical Oct 16, 2024
CVE-2024-45454 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements… 7.1 High Oct 6, 2024
CVE-2023-31080 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… 8.3 High Jun 9, 2024
CVE-2024-35674 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,… 4.3 Medium Jun 5, 2024
CVE-2023-33930 Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor… 9.1 Critical Jun 4, 2024
CVE-2023-31090 Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor… 9.9 Critical Apr 24, 2024
CVE-2024-29792 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements… 7.1 High Mar 27, 2024

Other Unlimited Elements products