Unlimited Elements for Elementor

Güvenlik açıkları

• CVE-2023-31080giriş gerekir≤ 1.5.65

  WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2024-35674giriş gerekir≤ 1.5.109

  WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2023-31090giriş gerekir≤ 1.5.60

  WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability

  Yüksek 8.8

• CVE-2024-6166katılımcı+≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection

  Yüksek 8.8

• CVE-2024-5329katılımcı+≤ 1.5.109

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter

  Yüksek 8.8

• CVE-2023-6743katılımcı+≤ 1.5.89

  Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import

  Yüksek 8.8

• CVE-2024-4779katılımcı+≤ 1.5.107

  Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]

  Yüksek 8.8

• CVE-2024-3055katılımcı+≤ 1.5.102

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection

  Yüksek 8.8

• CVE-2023-3295katılımcı+≤ 1.5.66

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload

  Yüksek 8.8

• CVE-2026-103338giriş gerekir≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-48837giriş gerekir≤ 2.0.8

  WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-18561kimlik doğrulamasız≤ 2.0.16

  Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection

  Yüksek 7.5

• CVE-2026-4659katılımcı+≤ 2.0.6

  Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal

  Yüksek 7.5

• CVE-2026-2724kimlik doğrulamasız≤ 2.0.5

  Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields

  Yüksek 7.2

• CVE-2025-13692kimlik doğrulamasız≤ 2.0

  Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

  Yüksek 7.2

• CVE-2024-49271yüksek yetki≤ 1.5.121

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability

  Yüksek 7.2

• CVE-2023-33930yüksek yetki≤ 1.5.66

  WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability

  Yüksek 7.2

• CVE-2024-2662yönetici≤ 1.5.102

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection

  Yüksek 7.2

• CVE-2026-103342kimlik doğrulamasız · tıklama gerekir≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-84820kimlik doğrulamasız · tıklama gerekir≤ 2.0.17

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-57718kimlik doğrulamasız · tıklama gerekir≤ 2.0.12

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2023-31231giriş gerekir≤ 1.5.65

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload

  Orta 6.5

• CVE-2026-28146katılımcı+≤ 2.0.14

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability

  Orta 6.5

• CVE-2026-5486katılımcı+≤ 2.0.7

  Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter

  Orta 6.5

• CVE-2026-66608katılımcı+≤ 2.0.19

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability

  Orta 6.4

• CVE-2025-8603katılımcı+≤ 1.5.148

  Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2026-77150kimlik doğrulamasız · tıklama gerekir≤ 2.0.16

  Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2026-75586kimlik doğrulamasız · tıklama gerekir≤ 2.0.17

  Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter

  Orta 6.1

• CVE-2024-45454kimlik doğrulamasız · tıklama gerekir≤ 1.5.121

  WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-3547kimlik doğrulamasız · tıklama gerekir≤ 1.5.102

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2024-29792kimlik doğrulamasız · tıklama gerekir≤ 1.5.93

  WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2026-28147giriş gerekir≤ 2.0.15

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2025-14274katılımcı+≤ 2.0.1

  Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget

  Orta 5.4

• CVE-2025-1663katılımcı+≤ 1.5.142

  Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-13155katılımcı+≤ 1.5.140

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split H

  Orta 5.4

• CVE-2024-13153katılımcı+≤ 1.5.135

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

  Orta 5.4

• CVE-2024-10784katılımcı+≤ 1.5.126

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 5.4

• CVE-2024-6170katılımcı+≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'

  Orta 5.4

• CVE-2024-6169katılımcı+≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'

  Orta 5.4

• CVE-2024-0367katılımcı+≤ 1.5.96

  Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link

  Orta 5.4

• CVE-2026-103341kimlik doğrulamasız≤ 2.0.20

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-85304kimlik doğrulamasız≤ 2.0.17

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2024-6171kimlik doğrulamasız≤ 1.5.112

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass

  Orta 5.3

• CVE-2022-47170yönetici≤ 1.5.48

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2024-3190katılımcı+≤ 1.5.107

  Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field

  Orta 4.6