Unlimited-elements

Unlimited Elements For Elementor

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-28146

  • EPSS 0.33%
  • Veröffentlicht 06.08.2026 14:27:12
  • Zuletzt bearbeitet 12.08.2026 20:58:37

Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions.

5.4

CVE-2026-28147

  • EPSS 0.17%
  • Veröffentlicht 03.08.2026 07:09:38
  • Zuletzt bearbeitet 12.08.2026 20:58:37

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor...

7.1

CVE-2026-57718

  • EPSS 0.18%
  • Veröffentlicht 13.07.2026 08:41:24
  • Zuletzt bearbeitet 13.07.2026 17:17:59

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This iss...

8.5

CVE-2026-48837

  • EPSS 0.37%
  • Veröffentlicht 25.05.2026 22:05:10
  • Zuletzt bearbeitet 24.07.2026 10:10:00

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elements For Elementor: from n/a through 2.0.8.

5.4

CVE-2025-1663

  • EPSS 0.22%
  • Veröffentlicht 03.04.2025 08:15:14
  • Zuletzt bearbeitet 10.04.2025 14:02:22

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.142 due to insufficient input sanitization and output escaping. This makes it possibl...

5.4

CVE-2024-13155

  • EPSS 0.34%
  • Veröffentlicht 20.02.2025 08:15:21
  • Zuletzt bearbeitet 25.02.2025 20:23:19

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Transparent Split Hero widget in all versions up to, and including, 1.5.140 due to insufficient input sanitization and output esca...

5.4

CVE-2024-13153

  • EPSS 0.31%
  • Veröffentlicht 09.01.2025 09:15:07
  • Zuletzt bearbeitet 08.04.2026 18:19:56

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input sanitization and output escaping on user supplied attr...

5.4

CVE-2024-10784

  • EPSS 0.35%
  • Veröffentlicht 12.12.2024 07:15:07
  • Zuletzt bearbeitet 12.12.2024 07:15:07

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Tile Gallery' widget in all versions up to, and including, 1.5.126 due to insufficient input sanitizatio...

7.2

CVE-2024-49271

  • EPSS 1.15%
  • Veröffentlicht 16.10.2024 13:15:14
  • Zuletzt bearbeitet 23.04.2026 15:19:33

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This issue affects Unlimited Elements For Elementor (Fr...

6.1

CVE-2024-45454

  • EPSS 0.31%
  • Veröffentlicht 06.10.2024 12:15:05
  • Zuletzt bearbeitet 23.04.2026 15:19:05

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This iss...