What’s Vulnerable › Products
unitecms Unlimited Elements For Elementor vulnerabilities
51 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 30 published in the last 12 months.
Check whether your unitecms Unlimited Elements For Elementor version is affected
Latest unitecms Unlimited Elements For Elementor vulnerabilities
- CVE-2026-62023 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2026-62121 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability (CVSS 6.5)
- CVE-2026-115593 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-95534 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability (CVSS 8.8)
- CVE-2026-94662 — WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-105064 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2026-103355 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-103344 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-103342 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-103341 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-103338 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-66608 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4)
- CVE-2026-77150 — Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2026-18561 — Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2026-84820 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-75586 — Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter (CVSS 6.1)
- CVE-2026-85304 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-28146 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability (CVSS 6.5)
- CVE-2026-28147 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability (CVSS 5.4)
- CVE-2026-57718 — WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-48837 — WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-5486 — Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter (CVSS 6.5)
- CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
- CVE-2026-4659 — Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal (CVSS 7.5)
- CVE-2026-2724 — Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields (CVSS 7.2)