Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
Unlimited Elements
Developer
2.0.1
Latest version
300,000
Installations
Nov 26, 2025
Last updated
Vulnerability history
0 present
28 fixed
11 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability<= 2.0Nov 27, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.5.148Aug 27, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.5.142Apr 2, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget vulnerability<= 1.5.140Feb 19, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.5.126Dec 12, 2024
- Remote Code Execution (RCE) vulnerability<= 1.5.121Oct 14, 2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.5.121Sep 30, 2024
- IP Address Spoofing to Antispam Bypass vulnerability<= 1.5.112Jul 9, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' vulnerability<= 1.5.112Jul 9, 2024
- Authenticated (Contributor+) Time-Based SQL Injection vulnerability<= 1.5.112Jul 9, 2024
- Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter vulnerability<= 1.5.109Jun 6, 2024
- Broken Access Control vulnerability<= 1.5.109Jun 5, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field vulnerability<= 1.5.107May 29, 2024
- Authenticated(Contributor+) Remote Code Execution via template import vulnerability<= 1.5.89May 29, 2024
- Authenticated (Contributor+) SQL Injection vulnerability<= 1.5.107May 23, 2024
- Authenticated (Contributor+) SQL Injection vulnerability<= 1.5.102May 10, 2024
- Authenticated (Admin+) Command Injection vulnerability<= 1.5.102May 10, 2024
- Reflected Cross-Site Scripting vulnerability<= 1.5.102May 10, 2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link vulnerability<= 1.5.96Apr 1, 2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.5.93Mar 25, 2024
- Reflected Cross Site Scripting (XSS) vulnerability< 1.5.75Jul 18, 2023
- Multiple Broken Access Control vulnerability<= 1.5.65Jun 20, 2023
- Arbitrary File Upload vulnerability<= 1.5.65Jun 20, 2023
- Unrestricted Zip Extraction vulnerability<= 1.5.66Jun 13, 2023
- Unrestricted Zip Extraction vulnerability<= 1.5.60May 22, 2023
- Cross Site Scripting (XSS)<= 1.5.48Jan 27, 2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability< 1.5.3Feb 28, 2022
- Sensitive Information Disclosure vulnerability< 1.5.3Feb 28, 2022