Approved changes feed: RSS · Atom

cpe:2.3:a:unlimited_elements:unlimited_elements_for_elementor_(free_widgets,_addons,_templates):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnlimited Elements (e1938deb-0086-5d46-b99d-1ef031fc6a18)
ProductUnlimited Elements For Elementor (Free Widgets, Addons, Templates) (6aa48b8b-81d6-5e24-ab83-451c700d75a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-115593 vulnerable 2026-11-03 10:15:37.462817 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.24.
Published: 2026-10-28T13:00:13.871Z
Updated: 2026-10-29T13:47:38.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66608 vulnerable 2026-10-13 12:28:43.409701 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability
MEDIUM (6.4)
Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.
Published: 2026-09-17T13:24:45.051Z
Updated: 2026-09-17T14:33:50.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-84820 vulnerable 2026-09-16 04:33:10.666106 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.
Published: 2026-09-08T07:15:57.318Z
Updated: 2026-09-08T10:34:57.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28147 vulnerable 2026-09-16 04:32:41.080592 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15.
Published: 2026-08-03T07:09:38.328Z
Updated: 2026-08-03T15:37:10.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57718 vulnerable 2026-07-29 01:03:16.095576 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 2.0.12.
Published: 2026-07-13T08:41:24.818Z
Updated: 2026-07-13T16:07:50.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49271 vulnerable 2026-06-08 06:50:13.326474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45454 vulnerable 2026-06-08 06:48:06.282008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35674 vulnerable 2026-06-08 06:39:42.314335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29792 vulnerable 2026-06-08 06:33:29.346072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33930 vulnerable 2026-06-08 06:06:23.892229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31231 vulnerable 2026-06-08 06:04:42.398315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31090 vulnerable 2026-06-08 06:04:41.791275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31080 vulnerable 2026-06-08 06:04:41.771094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47170 vulnerable 2026-06-08 05:50:39.940362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.