Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

unitecms Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity
`CVE-2026-18561`Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection	Exploitation statusNot confirmed	FixYes	Affected productUnlimited Elements For Elementor	Published09/11/2026	SeverityHigh
`CVE-2026-77150`Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productUnlimited Elements For Elementor	Published09/11/2026	SeverityMedium
`CVE-2026-75586`Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published09/05/2026	SeverityMedium
`CVE-2026-5486`Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/14/2026	SeverityMedium
`CVE-2024-13362`Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/01/2026	SeverityMedium
`CVE-2026-4659`Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published04/17/2026	SeverityHigh
`CVE-2026-2724`Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published03/10/2026	SeverityHigh
`CVE-2025-14274`Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published02/03/2026	SeverityMedium
`CVE-2025-14476`Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import	Exploitation statusNot known exploited	FixYes	Affected productDoubly – Cross Domain Copy Paste for WordPress	Published12/13/2025	SeverityHigh
`CVE-2025-13692`Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements for Elementor (Premium)	Published11/27/2025	SeverityHigh
`CVE-2025-8603`Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published08/28/2025	SeverityMedium
`CVE-2025-1663`Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published04/03/2025	SeverityMedium
`CVE-2024-13155`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published02/20/2025	SeverityMedium
`CVE-2024-13153`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published01/09/2025	SeverityMedium
`CVE-2024-10784`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published12/12/2024	SeverityMedium
`CVE-2022-4974`Freemius SDK <= 2.4.2 - Missing Authorization Checks	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published10/16/2024	SeverityMedium
`CVE-2024-6315`Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload	Exploitation statusNot known exploited	FixYes	Affected productBlox Page Builder	Published08/06/2024	SeverityHigh
`CVE-2024-6169`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published07/09/2024	SeverityMedium
`CVE-2024-6170`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published07/09/2024	SeverityMedium
`CVE-2024-6166`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published07/09/2024	SeverityHigh
`CVE-2024-6171`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published07/09/2024	SeverityMedium
`CVE-2024-5329`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published06/06/2024	SeverityHigh
`CVE-2024-3190`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/30/2024	SeverityMedium
`CVE-2023-6743`Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/29/2024	SeverityHigh
`CVE-2024-4779`Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/23/2024	SeverityHigh
`CVE-2024-3055`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/10/2024	SeverityHigh
`CVE-2024-3547`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/10/2024	SeverityMedium
`CVE-2024-2662`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published05/10/2024	SeverityHigh
`CVE-2024-0367`Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published03/30/2024	SeverityMedium
`CVE-2024-1710`Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload	Exploitation statusNot known exploited	FixYes	Affected productAddon Library	Published02/24/2024	SeverityHigh
`CVE-2023-6925`Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Addons for WPBakery Page Builder	Published02/05/2024	SeverityHigh
`CVE-2023-3295`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload	Exploitation statusNot known exploited	FixYes	Affected productUnlimited Elements For Elementor	Published06/17/2023	SeverityHigh