Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in Unlimited Elements For Elementor (Free Widgets, Addons, Templates), with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the vendor Elementor, specifically concerning the product "Unlimited Elements For Elementor (Free Widgets, Addons, Templates)". The collection focuses on various weakness types, including Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and other common web application flaws, covering vulnerabilities reported within the last three years. Here, users can track the vendor's advisory history, analyze the prevalence of a specific weakness class, or review the complete vulnerability timeline for this product. The data is organized by CVE identifiers, allowing researchers and developers to filter entries by severity, impact, or fix status. This aggregation serves as a centralized reference for understanding the security posture of the plugin within the broader Elementor ecosystem. No specific CVE IDs are highlighted; instead, the page provides a comprehensive overview to support risk assessment and patch management decisions for sites utilizing these free widgets and templates.

Vendor: Unlimited Elements

CVE ID Title CVSS Severity Published
CVE-2026-103355 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability CWE-89 9.3 Critical 2026-10-04
CVE-2026-103344 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-10-04
CVE-2026-103342 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-10-03
CVE-2026-103341 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-10-01
CVE-2026-103338 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability CWE-89 8.5 High 2026-10-01
CVE-2026-66608 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability CWE-918 6.4 Medium 2026-09-17
CVE-2026-84820 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-09-08
CVE-2026-85304 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-09-03
CVE-2026-28146 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability CWE-22 6.5 Medium 2026-08-06
CVE-2026-28147 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability CWE-862 5.4 Medium 2026-08-03
CVE-2026-57718 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-07-13
CVE-2024-49271 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability CWE-82 9.1 Critical 2024-10-16
CVE-2024-45454 WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-10-06
CVE-2023-31080 WordPress Unlimited Elements For Elementor plugin <= 1.5.65 - Multiple Broken Access Control vulnerability CWE-862 8.3 High 2024-06-09
CVE-2024-35674 WordPress Unlimited Elements For Elementor plugin <= 1.5.109 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-06-05
CVE-2023-33930 WordPress Unlimited Elements For Elementor plugin <= 1.5.66 - Unrestricted Zip Extraction vulnerability CWE-434 9.1 Critical 2024-06-04
CVE-2023-31090 WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability CWE-434 9.9 Critical 2024-04-24
CVE-2024-29792 WordPress Unlimited Elements for Elementor plugin <= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-03-27
CVE-2023-31231 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload CWE-434 9.9 Critical 2023-12-20
CVE-2022-47170 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium 2023-03-28

All 20 known CVE vulnerabilities affecting Unlimited Elements For Elementor (Free Widgets, Addons, Templates) with full Chinese analysis, references, and POCs where available.