Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Unlimited Elements For Elementor Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-18561`Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection	Exploitation statusNot confirmed	FixYes	Published09/11/2026	SeverityHigh
`CVE-2026-77150`Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Published09/11/2026	SeverityMedium
`CVE-2026-75586`Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter	Exploitation statusNot known exploited	FixYes	Published09/05/2026	SeverityMedium
`CVE-2026-5486`Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter	Exploitation statusNot known exploited	FixYes	Published05/14/2026	SeverityMedium
`CVE-2024-13362`Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter	Exploitation statusNot known exploited	FixYes	Published05/01/2026	SeverityMedium
`CVE-2026-4659`Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal	Exploitation statusNot known exploited	FixYes	Published04/17/2026	SeverityHigh
`CVE-2026-2724`Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields	Exploitation statusNot known exploited	FixYes	Published03/10/2026	SeverityHigh
`CVE-2025-14274`Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget	Exploitation statusNot known exploited	FixYes	Published02/03/2026	SeverityMedium
`CVE-2025-13692`Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload	Exploitation statusNot known exploited	FixYes	Published11/27/2025	SeverityHigh
`CVE-2025-8603`Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Published08/28/2025	SeverityMedium
`CVE-2025-1663`Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Published04/03/2025	SeverityMedium
`CVE-2024-13155`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget	Exploitation statusNot known exploited	FixYes	Published02/20/2025	SeverityMedium
`CVE-2024-13153`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets	Exploitation statusNot known exploited	FixYes	Published01/09/2025	SeverityMedium
`CVE-2024-10784`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Published12/12/2024	SeverityMedium
`CVE-2022-4974`Freemius SDK <= 2.4.2 - Missing Authorization Checks	Exploitation statusNot known exploited	FixYes	Published10/16/2024	SeverityMedium
`CVE-2024-6169`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username'	Exploitation statusNot known exploited	FixYes	Published07/09/2024	SeverityMedium
`CVE-2024-6170`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'	Exploitation statusNot known exploited	FixYes	Published07/09/2024	SeverityMedium
`CVE-2024-6166`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection	Exploitation statusNot known exploited	FixYes	Published07/09/2024	SeverityHigh
`CVE-2024-6171`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass	Exploitation statusNot known exploited	FixYes	Published07/09/2024	SeverityMedium
`CVE-2024-5329`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter	Exploitation statusNot known exploited	FixYes	Published06/06/2024	SeverityHigh
`CVE-2024-3190`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field	Exploitation statusNot known exploited	FixYes	Published05/30/2024	SeverityMedium
`CVE-2023-6743`Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import	Exploitation statusNot known exploited	FixYes	Published05/29/2024	SeverityHigh
`CVE-2024-4779`Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0]	Exploitation statusNot known exploited	FixYes	Published05/23/2024	SeverityHigh
`CVE-2024-3055`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection	Exploitation statusNot known exploited	FixYes	Published05/10/2024	SeverityHigh
`CVE-2024-3547`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Published05/10/2024	SeverityMedium
`CVE-2024-2662`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection	Exploitation statusNot known exploited	FixYes	Published05/10/2024	SeverityHigh
`CVE-2024-0367`Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link	Exploitation statusNot known exploited	FixYes	Published03/30/2024	SeverityMedium
`CVE-2023-3295`Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.66 - Authenticated (Contributor+) Arbitrary File Upload	Exploitation statusNot known exploited	FixYes	Published06/17/2023	SeverityHigh

28 / 28 Results

All vulnerabilities loaded

Security vulnerabilities in Unlimited Elements For Elementor

Unlimited Elements For Elementor

Verify to analyze this security profile

How many security vulnerabilities does Unlimited Elements For Elementor have?

Does the latest Unlimited Elements For Elementor version have known vulnerabilities?

Run an in-depth assessment with complete web risk management