unlimited-elements unlimited elements for elementor

Name: unlimited-elements unlimited elements for elementor
Brand: unlimited-elements

productUS

cpe:2.3:a:unlimited-elements:unlimited_elements_for_elementor:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical7high10medium0low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-2662US	—	1.75% (78th)	—	1.5.103	2024-05-14	< 1.5.103
CVE-2023-3295US	high8.8	1.31% (70th)	—	1.5.67	2023-06-17	< 1.5.67
CVE-2023-6743US	—	1.25% (69th)	—	no fix	2024-05-29	≤ 1.5.89
CVE-2024-49271US	high7.2	1.14% (66th)	—	1.5.122	2024-10-16	< 1.5.122
CVE-2024-3055US	high8.8	0.82% (57th)	—	1.5.105	2024-05-14	< 1.5.105
CVE-2023-31090US	high8.8	0.76% (55th)	—	1.5.61	2024-04-24	< 1.5.61
CVE-2024-29792US	medium6.1	0.74% (54th)	—	1.5.95	2024-03-27	< 1.5.95
CVE-2023-31231US	medium6.5	0.65% (51st)	—	1.5.66	2023-12-20	< 1.5.66
CVE-2023-33930US	high7.2	0.52% (44th)	—	1.5.67	2024-06-04	< 1.5.67
CVE-2024-5329US	—	0.51% (43rd)	—	1.5.110	2024-06-06	< 1.5.110
CVE-2024-4779US	—	0.45% (39th)	—	1.5.108	2024-05-23	< 1.5.108
CVE-2024-3547US	—	0.40% (34th)	—	1.5.103	2024-05-14	< 1.5.103
CVE-2022-47170US	medium4.8	0.39% (33rd)	—	1.5.49	2023-03-28	< 1.5.49
CVE-2023-31080US	high8.8OT elevated	0.39% (33rd)	—	1.5.66	2024-06-09	< 1.5.66
CVE-2024-35674US	high8.8OT elevated	0.37% (30th)	—	1.5.110	2024-06-05	< 1.5.110
CVE-2024-10784US	medium5.4	0.35% (29th)	—	1.5.127	2024-12-12	< 1.5.127
CVE-2024-13155US	medium5.4	0.35% (29th)	—	1.5.141	2025-02-20	< 1.5.141
CVE-2024-0367US	medium5.4	0.34% (27th)	—	no fix	2024-03-30	≤ 1.5.96
CVE-2024-45454US	medium6.1	0.33% (26th)	—	1.5.122	2024-10-06	< 1.5.122
CVE-2024-13153US	medium5.4	0.32% (25th)	—	1.5.136	2025-01-09	< 1.5.136
CVE-2024-3190US	medium4.6	0.26% (17th)	—	1.5.108	2024-05-30	< 1.5.108
CVE-2025-1663US	medium5.4	0.23% (14th)	—	no fix	2025-04-03	≤ 1.5.142

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-862Missing Authorization2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-1336Improper Neutralization of Special Elements Used in a Template Engine1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-82Improper Neutralization of Script in Attributes of IMG Tags in a Web Page1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.