Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Unlimited Elements
Developer
2.0.6
Latest version
300,000
Installations
No date
Last updated
Vulnerability history
0 present
32 patched
12 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting via Form Entry Fields vulnerability<= 2.0.511/03/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget vulnerability<= 2.0.102/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' vulnerability<= 1.5.11202/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability<= 1.5.13531/12/2025
- Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability<= 2.027/11/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.5.14827/08/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.5.14202/04/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget vulnerability<= 1.5.14019/02/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.5.12612/12/2024
- Remote Code Execution (RCE) vulnerability<= 1.5.12114/10/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.5.12130/09/2024
- IP Address Spoofing to Antispam Bypass vulnerability<= 1.5.11209/07/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' vulnerability<= 1.5.11209/07/2024
- Authenticated (Contributor+) Time-Based SQL Injection vulnerability<= 1.5.11209/07/2024
- Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter vulnerability<= 1.5.10906/06/2024
- Broken Access Control vulnerability<= 1.5.10905/06/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field vulnerability<= 1.5.10729/05/2024
- Authenticated(Contributor+) Remote Code Execution via template import vulnerability<= 1.5.8929/05/2024
- Authenticated (Contributor+) SQL Injection vulnerability<= 1.5.10723/05/2024
- Authenticated (Contributor+) SQL Injection vulnerability<= 1.5.10210/05/2024
- Authenticated (Admin+) Command Injection vulnerability<= 1.5.10210/05/2024
- Reflected Cross-Site Scripting vulnerability<= 1.5.10210/05/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link vulnerability<= 1.5.9601/04/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.5.9325/03/2024
- Reflected Cross Site Scripting (XSS) vulnerability< 1.5.7518/07/2023
- Multiple Broken Access Control vulnerability<= 1.5.6520/06/2023
- Arbitrary File Upload vulnerability<= 1.5.6520/06/2023
- Unrestricted Zip Extraction vulnerability<= 1.5.6613/06/2023
- Unrestricted Zip Extraction vulnerability<= 1.5.6022/05/2023
- Cross Site Scripting (XSS)<= 1.5.4827/01/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 1.5.328/02/2022
- Sensitive Information Disclosure vulnerability< 1.5.328/02/2022