📦 Unlimited Elements For Elementor

This vulnerability allows attackers to upload malicious ZIP files containing dangerous file types to WordPress sites using the Unlimited Elements for Elementor plugin. When extracted, these files can ...

This vulnerability allows attackers to upload arbitrary files, including web shells, to WordPress sites running the Unlimited Elements for Elementor plugin. Attackers can achieve remote code execution...

This CVE describes a reflected cross-site scripting (XSS) vulnerability in the Unlimited Elements for Elementor WordPress plugin. Attackers can inject malicious scripts via crafted URLs that execute w...

This CVE describes a Missing Authorization vulnerability in the Unlimited Elements For Elementor WordPress plugin. It allows attackers to perform unauthorized actions due to broken access controls. Al...

This vulnerability allows authenticated WordPress users with Contributor-level access or higher to perform blind SQL injection attacks via the 'data[addonID]' parameter in the Unlimited Elements For E...

This vulnerability allows authenticated WordPress users with contributor-level access or higher to execute arbitrary code on the server through the Unlimited Elements For Elementor plugin's template i...

This vulnerability allows authenticated attackers with contributor-level access or higher to perform SQL injection attacks via the 'data[post_ids][0]' parameter in the Unlimited Elements For Elementor...

This vulnerability allows authenticated WordPress users with contributor-level access or higher to perform time-based SQL injection attacks through the 'id' parameter in the Unlimited Elements For Ele...

This vulnerability allows authenticated WordPress administrators to execute arbitrary commands on the server through the Unlimited Elements For Elementor plugin. Attackers with admin access can inject...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the Unlimited Elements For Elementor WordPress plugin. When users visit a specially crafted URL, the scripts...

This vulnerability in the Unlimited Elements For Elementor WordPress plugin allows authenticated attackers with contributor-level permissions or higher to upload arbitrary files due to missing file ty...

The Unlimited Elements For Elementor WordPress plugin has a stored XSS vulnerability in its Transparent Split Hero widget. Authenticated attackers with contributor-level access or higher can inject ma...

This vulnerability allows authenticated WordPress users with Contributor-level access or higher to inject malicious scripts into pages using the Unlimited Elements for Elementor plugin's Tile Gallery ...

This CVE describes a Missing Authorization vulnerability in the Unlimited Elements For Elementor WordPress plugin. It allows unauthorized users to access functionality intended only for authenticated ...

This vulnerability allows authenticated administrators to inject malicious scripts into the Unlimited Elements for Elementor WordPress plugin. When other users view pages containing these injected scr...