What’s Vulnerable › Products

Unlimited Elements for Elementor vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Unlimited Elements for Elementor version is affected

Latest Unlimited Elements for Elementor vulnerabilities

• CVE-2026-92923 — Unlimited Elements For Elementor 1.5.142 - 2.0.20 - Subscriber+ SQLi via get_addon_output_data (CVSS 6.3)
• CVE-2026-85568 — Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter (CVSS 6.8)
• CVE-2026-85015 — Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal (CVSS 6.6)
• CVE-2026-92924 — Unlimited Elements For Elementor < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution via get_addon_output_data (CVSS 5.4)
• CVE-2026-85016 — Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter (CVSS 6.8)
• CVE-2026-85017 — Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection (CVSS 7.5)
• CVE-2026-10081 — Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget (CVSS 8.8)