Unlimited-elements

Unlimited Elements For Elementor

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-31090

  • EPSS 0.76%
  • Veröffentlicht 24.04.2024 16:15:07
  • Zuletzt bearbeitet 28.04.2026 19:20:20

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to a Web Server.This issue affects Unlimited Elements For Elementor (Free...

5.4

CVE-2024-0367

  • EPSS 0.34%
  • Veröffentlicht 30.03.2024 05:15:34
  • Zuletzt bearbeitet 08.04.2026 18:18:49

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link field of an installed widget (e.g., 'Button Link') in all versions up to, and including, 1.5.96 due to insufficient input sanitization...

6.1

CVE-2024-29792

  • EPSS 0.74%
  • Veröffentlicht 27.03.2024 13:15:50
  • Zuletzt bearbeitet 23.04.2026 15:18:08

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited ...

6.5

CVE-2023-31231

  • EPSS 0.65%
  • Veröffentlicht 20.12.2023 19:15:09
  • Zuletzt bearbeitet 28.04.2026 19:20:22

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a thr...

8.8

CVE-2023-3295

  • EPSS 1.31%
  • Veröffentlicht 17.06.2023 02:15:08
  • Zuletzt bearbeitet 21.11.2024 08:16:57

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the file manager functionality in versions up to, and including, 1.5.66 . Thi...

4.8

CVE-2022-47170

  • EPSS 0.39%
  • Veröffentlicht 28.03.2023 09:15:07
  • Zuletzt bearbeitet 21.11.2024 07:31:38

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions.