Plugin icon

Unlimited Elements For Elementor

unlimited-elements-for-elementor

Vulnerabilities:

28

Last Updated:

February 26, 2026

Active Installs:

300000

Published
Title
Fixed in
CVSS
Published
2026-03-09
Title
Unlimited Elements For Elementor < 2.0.6 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.6
CVSS
7.1 (high)
Published
2026-02-02
Title
Unlimited Elements for Elementor < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
Fixed in
Fixed in 2.0.2
CVSS
5.4 (medium)
Published
2025-11-26
Title
Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) < 2.0.1 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 2.0.1
CVSS
7.2 (high)
Published
2025-08-27
Title
Unlimited Elements For Elementor < 1.5.149 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.149
CVSS
6.4 (medium)
Published
2025-04-02
Title
Unlimited Elements For Elementor < 1.5.143 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.143
CVSS
6.4 (medium)
Published
2025-02-19
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.141 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget
Fixed in
Fixed in 1.5.141
CVSS
6.4 (medium)
Published
2025-01-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.136 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 1.5.136
CVSS
6.4 (medium)
Published
2024-12-11
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.127 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.127
CVSS
6.4 (medium)
Published
2024-10-14
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.122 - Authenticated (Editor+) Remote Code Execution
Fixed in
Fixed in 1.5.122
CVSS
7.2 (high)
Published
2024-09-30
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.122 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.122
CVSS
6.1 (medium)
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - Authenticated (Contributor+) Time-Based SQL Injection
Fixed in
Fixed in 1.5.113
CVSS
8.8 (high)
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'
Fixed in
Fixed in 1.5.113
CVSS
6.4 (medium)
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - IP Address Spoofing to Antispam Bypass
Fixed in
Fixed in 1.5.113
CVSS
5.3 (medium)
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'
Fixed in
Fixed in 1.5.113
CVSS
6.4 (medium)
Published
2024-06-05
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.110 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
Fixed in
Fixed in 1.5.110
CVSS
8.8 (high)
Published
2024-06-05
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.110 - Authenticated (Contributor+) Information Exposure
Fixed in
Fixed in 1.5.110
CVSS
4.3 (medium)
Published
2024-05-29
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.108 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Fixed in
Fixed in 1.5.108
CVSS
5.4 (medium)
Published
2024-05-28
Title
Unlimited Elements for Elementor < 1.5.91 - Contributor+ Remote Code Execution via template import
Fixed in
Fixed in 1.5.91
CVSS
8.8 (high)
Published
2024-05-22
Title
Unlimited Elements for Elementor < 1.5.108 - Contributor+ SQLi
Fixed in
Fixed in 1.5.108
CVSS
6.8 (medium)
Published
2024-05-10
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.105 - Contributor+ SQL Injection
Fixed in
Fixed in 1.5.105
CVSS
7.2 (high)
Published
2024-05-09
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.103 - Admin+ Command Injection
Fixed in
Fixed in 1.5.103
CVSS
6.6 (medium)
Published
2024-05-09
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.103 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.103
CVSS
6.1 (medium)
Published
2024-03-29
Title
Unlimited Elements For Elementor < 1.5.97 - Contributor+ Stored XSS
Fixed in
Fixed in 1.5.97
CVSS
5.9 (medium)
Published
2024-03-25
Title
Unlimited Elements For Elementor < 1.5.94 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.94
CVSS
7.1 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.5.75
CVSS
6.1 (medium)
Published
2023-06-16
Title
Unlimited Elements For Elementor < 1.5.67 - Contributor+ Arbitrary File Upload
Fixed in
Fixed in 1.5.67
CVSS
7.2 (high)
Published
2023-01-27
Title
Unlimited Elements For Elementor < 1.5.49 - Admin+ Stored XSS
Fixed in
Fixed in 1.5.49
CVSS
3.5 (low)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.5.3
CVSS
4.3 (medium)