WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
unlimited-blocks
Published
2024-09-16
Title
Gutenberg Blocks <= 1.2.8 - Contributor+ Stored XSS
Slug
unlimited-elements-for-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
unlimited-elements-for-elementor
Published
2023-01-27
Title
Unlimited Elements For Elementor < 1.5.49 - Admin+ Stored XSS
Slug
unlimited-elements-for-elementor
Published
2023-06-16
Title
Unlimited Elements For Elementor < 1.5.67 - Contributor+ Arbitrary File Upload
Slug
unlimited-elements-for-elementor
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-03-29
Title
Unlimited Elements For Elementor < 1.5.97 - Contributor+ Stored XSS
Slug
unlimited-elements-for-elementor
Published
2024-03-25
Title
Unlimited Elements For Elementor < 1.5.94 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-05-09
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.103 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-05-09
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.103 - Admin+ Command Injection
Slug
unlimited-elements-for-elementor
Published
2024-05-10
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.105 - Contributor+ SQL Injection
Slug
unlimited-elements-for-elementor
Published
2024-05-22
Title
Unlimited Elements for Elementor < 1.5.108 - Contributor+ SQLi
Slug
unlimited-elements-for-elementor
Published
2024-05-28
Title
Unlimited Elements for Elementor < 1.5.91 - Contributor+ Remote Code Execution via template import
Slug
unlimited-elements-for-elementor
Published
2024-05-29
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.108 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field
Slug
unlimited-elements-for-elementor
Published
2024-06-05
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.110 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
Slug
unlimited-elements-for-elementor
Published
2024-06-05
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.110 - Authenticated (Contributor+) Information Exposure
Slug
unlimited-elements-for-elementor
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'
Slug
unlimited-elements-for-elementor
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'
Slug
unlimited-elements-for-elementor
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - Authenticated (Contributor+) Time-Based SQL Injection
Slug
unlimited-elements-for-elementor
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - IP Address Spoofing to Antispam Bypass
Slug
unlimited-elements-for-elementor
Published
2024-09-30
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.122 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-10-14
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.122 - Authenticated (Editor+) Remote Code Execution
Slug
unlimited-elements-for-elementor
Published
2024-12-11
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.127 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2025-01-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.136 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
unlimited-elements-for-elementor
Published
2025-02-19
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.141 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget
Slug
unlimited-elements-for-elementor
Published
2025-04-02
Title
Unlimited Elements For Elementor < 1.5.143 - Authenticated (Contributor+) Stored Cross-Site Scripting