Threat database

20 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.3%	CVE-2026-95534Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Deserialization of Untrusted Data High8.8EPSS 0.3%2026-10-07CVE Database V5CVE-2026-95534 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19. EPSS 0.3%Vulnerability Unlimited Elements #cwe-502	CVE Database V5	2026-10-07
High	7.1	EPSS 0.1%	CVE-2026-94662Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Cross-site Scripting High7.1EPSS 0.1%2026-10-07CVE Database V5CVE-2026-94662 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Stored XSS. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19. EPSS 0.1%Vulnerability Unlimited Elements #cwe-79	CVE Database V5	2026-10-07
Medium	6.5	EPSS 0.2%	CVE-2026-105064Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') in Unlimited… Medium6.5EPSS 0.2%2026-10-05CVE Database V5CVE-2026-105064 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.22. EPSS 0.2%Vulnerability Unlimited Elements	CVE Database V5	2026-10-05
High	7.1	EPSS 0.1%	CVE-2026-103344Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Cross-site Scripting High7.1EPSS 0.1%2026-10-04GCVE DatabaseCVE-2026-103344 CVE-2026-103344 is a reflected cross-site scripting (XSS) vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) up to version 2.0.20. It allows improper neutralization of input during web page generation, enabling attackers to execute malicious scripts in users' browsers. The vulnerability has a high severity rating with a CVSS score of 7.1. EPSS 0.1%Vulnerability Unlimited Elements #ghsa-h349-fxgq-c583 #cwe-79	GCVE Database	2026-10-04
High	7.1	EPSS 0.1%	CVE-2026-103342Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Unlimited… High7.1EPSS 0.1%2026-10-03GCVE DatabaseCVE-2026-103342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20. EPSS 0.1%Vulnerability Unlimited Elements #ghsa-j3m5-w9gh-35hx #cwe-79	GCVE Database	2026-10-03
Medium	5.3	EPSS 0.2%	CVE-2026-103341Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Missing Authorization Medium5.3EPSS 0.2%2026-10-01CVE Database V5CVE-2026-103341 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20. EPSS 0.2%Vulnerability Unlimited Elements	CVE Database V5	2026-10-01
High	8.5	EPSS 0.2%	CVE-2026-103338Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Unlimited… High8.5EPSS 0.2%2026-10-01CVE Database V5CVE-2026-103338 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20. EPSS 0.2%Vulnerability Unlimited Elements	CVE Database V5	2026-10-01
Medium	6.4	EPSS 0.2%	CVE-2026-66608Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Server-Side Request Forgery (SSRF) Medium6.4EPSS 0.2%2026-09-17CVE Database V5CVE-2026-66608 Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions. EPSS 0.2%Vulnerability Unlimited Elements #cwe-918	CVE Database V5	2026-09-17
High	7.1	EPSS 0.3%	CVE-2026-84820Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Cross-site Scripting High7.1EPSS 0.3%2026-09-08CVE Database V5CVE-2026-84820 Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions. EPSS 0.3%Vulnerability Unlimited Elements #cwe-79	CVE Database V5	2026-09-08
Medium	5.3	EPSS 0.3%	CVE-2026-85304Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Missing Authorization Medium5.3EPSS 0.3%2026-09-03CVE Database V5CVE-2026-85304 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.17. EPSS 0.3%Vulnerability Unlimited Elements #cwe-862	CVE Database V5	2026-09-03
Medium	6.5	EPSS 0.4%	CVE-2026-28146Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Path Traversal Medium6.5EPSS 0.4%2026-08-06CVE Database V5CVE-2026-28146 CVE-2026-28146 is a path traversal vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) affecting versions up to 2.0.14. It allows a contributor-level user to perform arbitrary file download by exploiting improper limitation of pathname to a restricted directory. The vulnerability has a CVSS score of 6.5, indicating medium severity. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time. EPSS 0.4%Vulnerability Unlimited Elements #cwe-22 #ghsa-rc6c-xxc7-jg93	CVE Database V5	2026-08-06
Medium	5.4	EPSS 0.3%	CVE-2026-28147Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Missing Authorization Medium5.4EPSS 0.3%2026-08-03CVE Database V5CVE-2026-28147 CVE-2026-28147 is a missing authorization vulnerability in the Unlimited Elements For Elementor plugin (Free Widgets, Addons, Templates) affecting versions up to and including 2.0.15. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 5.4. No official patch or remediation guidance is currently available from the vendor. EPSS 0.3%Vulnerability Unlimited Elements #cwe-862 #ghsa-crjc-75c2-rpr6	CVE Database V5	2026-08-03
High	7.1	EPSS 0.3%	CVE-2026-57718Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Unlimited… High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57718 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 2.0.12. EPSS 0.3%Vulnerability Unlimited Elements #cwe-79	CVE Database V5	2026-07-13
High	8.5	EPSS 0.4%	CVE-2026-48837Unlimited Elements For Elementor · SQL Injection High8.5EPSS 0.4%2026-05-25CVE Database V5CVE-2026-48837 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elements For Elementor: from n/a through 2.0.8. EPSS 0.4%Vulnerability Unlimited Elements #cwe-89	CVE Database V5	2026-05-25
Critical	9.1	EPSS 1.1%	CVE-2024-49271Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Deserialization of Untrusted Data Critical9.1EPSS 1.1%2024-10-16CVE Database V5CVE-2024-49271 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Command Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.121. EPSS 1.1%Vulnerability Unlimited Elements	CVE Database V5	2024-10-16
High	7.1	EPSS 0.3%	CVE-2024-45454Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Unlimited… High7.1EPSS 0.3%2024-10-06CVE Database V5CVE-2024-45454 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.121. EPSS 0.3%Vulnerability Unlimited Elements	CVE Database V5	2024-10-06
Medium	4.3	EPSS 0.4%	CVE-2024-35674Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Missing Authorization Medium4.3EPSS 0.4%2024-06-05CVE Database V5CVE-2024-35674 Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.109. EPSS 0.4%Vulnerability Unlimited Elements	CVE Database V5	2024-06-05
High	7.1	EPSS 0.7%	CVE-2024-29792Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Unlimited… High7.1EPSS 0.7%2024-03-27CVE Database V5CVE-2024-29792 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.93. EPSS 0.7%Vulnerability Unlimited Elements	CVE Database V5	2024-03-27

Showing 1–20 of 20 results · 2 duplicate CVE records merged