# cve.now: Unlimited Elements

The newest entries naming Unlimited Elements as an affected vendor (up to 200), of 29 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-121579](https://cve.now/CVE-2026-121579.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.26 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-62007](https://cve.now/CVE-2026-62007.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.26 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-62023](https://cve.now/CVE-2026-62023.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.26 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2026-62121](https://cve.now/CVE-2026-62121.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.26 - Local File Inclusion vulnerability (CVSS 6.5)
- [CVE-2026-115593](https://cve.now/CVE-2026-115593.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.24 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-95534](https://cve.now/CVE-2026-95534.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.19 - PHP Object Injection vulnerability (CVSS 8.8)
- [CVE-2026-94662](https://cve.now/CVE-2026-94662.md): WordPress Unlimited Elements For Elementor plugin \<= 2.0.19 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-105064](https://cve.now/CVE-2026-105064.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.22 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-103355](https://cve.now/CVE-2026-103355.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.20 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-103344](https://cve.now/CVE-2026-103344.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.20 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-103342](https://cve.now/CVE-2026-103342.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.20 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-103341](https://cve.now/CVE-2026-103341.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.20 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-103338](https://cve.now/CVE-2026-103338.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.20 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2026-66608](https://cve.now/CVE-2026-66608.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.4)
- [CVE-2026-84820](https://cve.now/CVE-2026-84820.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.17 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-85304](https://cve.now/CVE-2026-85304.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.17 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-28146](https://cve.now/CVE-2026-28146.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.14 - Arbitrary File Download vulnerability (CVSS 6.5)
- [CVE-2026-28147](https://cve.now/CVE-2026-28147.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.15 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2026-57718](https://cve.now/CVE-2026-57718.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 2.0.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-48837](https://cve.now/CVE-2026-48837.md): WordPress Unlimited Elements For Elementor plugin \<= 2.0.8 - SQL Injection vulnerability (CVSS 8.5)
- [CVE-2024-49271](https://cve.now/CVE-2024-49271.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin \<= 1.5.121 - Remote Code Execution (RCE) vulnerability (CVSS 9.1)
- [CVE-2024-45454](https://cve.now/CVE-2024-45454.md): WordPress Unlimited Elements for Elementor plugin \<= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2023-31080](https://cve.now/CVE-2023-31080.md): WordPress Unlimited Elements For Elementor plugin \<= 1.5.65 - Multiple Broken Access Control vulnerability (CVSS 8.3)
- [CVE-2024-35674](https://cve.now/CVE-2024-35674.md): WordPress Unlimited Elements For Elementor plugin \<= 1.5.109 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2023-33930](https://cve.now/CVE-2023-33930.md): WordPress Unlimited Elements For Elementor plugin \<= 1.5.66 - Unrestricted Zip Extraction vulnerability (CVSS 9.1)
- [CVE-2023-31090](https://cve.now/CVE-2023-31090.md): WordPress Unlimited Elements For Elementor plugin \<= 1.5.60 - Unrestricted Zip Extraction vulnerability (CVSS 9.9)
- [CVE-2024-29792](https://cve.now/CVE-2024-29792.md): WordPress Unlimited Elements for Elementor plugin \<= 1.5.93 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2023-31231](https://cve.now/CVE-2023-31231.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin \<= 1.5.65 is vulnerable to Arbitrary File Upload (CVSS 9.9)
- [CVE-2022-47170](https://cve.now/CVE-2022-47170.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin \<= 1.5.48 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/unlimited-elements
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.