Unlimited Elements for Elementor

Уязвимости

• CVE-2026-103355без авторизации≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2023-31080нужен вход≤ 1.5.65

  WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-35674нужен вход≤ 1.5.109

  WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-31090нужен вход≤ 1.5.60

  WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability

  Высокий 8.8

• CVE-2024-6166участник+≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection

  Высокий 8.8

• CVE-2024-5329участник+≤ 1.5.109

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter

  Высокий 8.8

• CVE-2023-6743участник+≤ 1.5.89

  Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import

  Высокий 8.8

• CVE-2024-4779участник+≤ 1.5.107

  Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]

  Высокий 8.8

• CVE-2024-3055участник+≤ 1.5.102

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection

  Высокий 8.8

• CVE-2023-3295участник+≤ 1.5.66

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload

  Высокий 8.8

• CVE-2026-103338нужен вход≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-48837нужен вход≤ 2.0.8

  WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-18561без авторизации≤ 2.0.16

  Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection

  Высокий 7.5

• CVE-2026-4659участник+≤ 2.0.6

  Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal

  Высокий 7.5

• CVE-2026-2724без авторизации≤ 2.0.5

  Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields

  Высокий 7.2

• CVE-2025-13692без авторизации≤ 2.0

  Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

  Высокий 7.2

• CVE-2024-49271высокие права≤ 1.5.121

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability

  Высокий 7.2

• CVE-2023-33930высокие права≤ 1.5.66

  WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability

  Высокий 7.2

• CVE-2024-2662админ≤ 1.5.102

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection

  Высокий 7.2

• CVE-2026-103344без авторизации · нужен клик≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-103342без авторизации · нужен клик≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-84820без авторизации · нужен клик≤ 2.0.17

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-57718без авторизации · нужен клик≤ 2.0.12

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2023-31231нужен вход≤ 1.5.65

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload

  Средний 6.5

• CVE-2026-28146участник+≤ 2.0.14

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability

  Средний 6.5

• CVE-2026-5486участник+≤ 2.0.7

  Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter

  Средний 6.5

• CVE-2026-66608участник+≤ 2.0.19

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability

  Средний 6.4

• CVE-2025-8603участник+≤ 1.5.148

  Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2026-77150без авторизации · нужен клик≤ 2.0.16

  Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2026-75586без авторизации · нужен клик≤ 2.0.17

  Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter

  Средний 6.1

• CVE-2024-45454без авторизации · нужен клик≤ 1.5.121

  WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-3547без авторизации · нужен клик≤ 1.5.102

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-29792без авторизации · нужен клик≤ 1.5.93

  WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2026-28147нужен вход≤ 2.0.15

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability

  Средний 5.4

• CVE-2025-14274участник+≤ 2.0.1

  Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget

  Средний 5.4

• CVE-2025-1663участник+≤ 1.5.142

  Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-13155участник+≤ 1.5.140

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split H

  Средний 5.4

• CVE-2024-13153участник+≤ 1.5.135

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  Средний 5.4

• CVE-2024-10784участник+≤ 1.5.126

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-6170участник+≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'

  Средний 5.4

• CVE-2024-6169участник+≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'

  Средний 5.4

• CVE-2024-0367участник+≤ 1.5.96

  Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link

  Средний 5.4

• CVE-2026-103341без авторизации≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-85304без авторизации≤ 2.0.17

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-6171без авторизации≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass

  Средний 5.3

• CVE-2022-47170админ≤ 1.5.48

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2024-3190участник+≤ 1.5.107

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field

  Средний 4.6