WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
unlimited-elements-for-elementor
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - IP Address Spoofing to Antispam Bypass
Slug
unlimited-elements-for-elementor
Published
2024-09-30
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.122 - Reflected Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2024-10-14
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.122 - Authenticated (Editor+) Remote Code Execution
Slug
unlimited-elements-for-elementor
Published
2024-12-11
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.127 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2025-01-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.136 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
unlimited-elements-for-elementor
Published
2025-02-19
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.141 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget
Slug
unlimited-elements-for-elementor
Published
2025-04-02
Title
Unlimited Elements For Elementor < 1.5.143 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2025-08-27
Title
Unlimited Elements For Elementor < 1.5.149 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2025-11-26
Title
Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) < 2.0.1 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
unlimited-elements-for-elementor
Published
2026-02-02
Title
Unlimited Elements for Elementor < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget
Slug
unlimited-elements-for-elementor
Published
2026-03-09
Title
Unlimited Elements For Elementor < 2.0.6 - Unauthenticated Stored Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2026-04-16
Title
Unlimited Elements For Elementor < 2.0.7 - Contributor+ Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal
Slug
unlimited-elements-for-elementor
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
unlimited-elements-for-elementor
Published
2026-05-26
Title
Unlimited Elements For Elementor < 2.0.9 - Authenticated (Contributor+) SQL Injection
Slug
unlimited-elements-for-elementor
Published
2026-05-13
Title
Unlimited Elements For Elementor < 2.0.8 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter
Slug
unlimited-elements-for-elementor
Published
2026-06-29
Title
Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget
Slug
unlimited-elements-for-elementor
Published
2026-07-09
Title
Unlimited Elements For Elementor < 2.0.13 - Unauthenticated Stored Cross-Site Scripting
Slug
unlimited-elements-for-elementor
Published
2026-08-03
Title
Unlimited Elements For Elementor < 2.0.16 - Missing Authorization
Slug
unlimited-elements-for-elementor
Published
2026-08-03
Title
Unlimited Elements For Elementor < 2.0.15 - Authenticated (Contributor+) Arbitrary File Download
Slug
unlimited-elements-for-elementor
Published
2026-09-03
Title
Unlimited Elements For Elementor < 2.0.18 - Missing Authorization
Slug
unlimited-elements-for-elementor
Published
2026-09-04
Title
Unlimited Elements For Elementor < 2.0.18 - Reflected Cross-Site Scripting via 'formData[id]' Parameter
Slug
unlimited-elements-for-elementor-premium
Published
2025-11-26
Title
Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) < 2.0.1 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
unlimited-elements-for-elementor-premium
Published
2026-03-16
Title
Unlimited Elements for Elementor (Premium) <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Upload
Slug
unlimited-page-sidebars
Published
2025-01-31
Title
Unlimited Page Sidebars < 0.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
unlimited-popups
Published
2016-04-21
Title
Unlimited Pop-Ups <= 1.4.3 - Cross-Site Scripting (XSS)