Unknown Unlimited Elements For Elementor

6 known vulnerabilities in Unknown Unlimited Elements For Elementor, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-92923 CVSS 6.3 medium The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL…
  • CVE-2026-85568 CVSS 6.8 medium The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewriting an already…
  • CVE-2026-85015 CVSS 6.6 medium The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before…
  • CVE-2026-92924 CVSS 5.4 medium The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not check that a request to render widget output comes from a…
  • CVE-2026-85016 CVSS 6.8 medium The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML…
  • CVE-2026-85017 CVSS 7.5 high The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes…