{"id":"CVE-2023-33930","aliases":["EUVD-2023-38080","GHSA-w75h-h72p-cm23"],"status":"published","title":"WordPress Unlimited Elements For Elementor plugin \u003c= 1.5.66 - Unrestricted Zip Extraction vulnerability","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.66.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00519,"percentile":0.44369,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2024-06-04T07:08:04Z","modified":"2026-06-17T06:02:32Z","products":[{"vendor":"unitecms","product":"unlimited elements for elementor (free widgets, addons, templates)"},{"vendor":"unlimited elements","product":"unlimited elements for elementor (free widgets, addons, templates)"},{"vendor":"unlimited-elements","product":"unlimited_elements_for_elementor"}],"references":[{"url":"https://patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-66-unrestricted-zip-extraction-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33930"},{"url":"https://github.com/advisories/GHSA-w75h-h72p-cm23"}],"sources":{"cve":[{"id":"CVE-2023-33930","title":"WordPress Unlimited Elements For Elementor plugin \u003c= 1.5.66 - Unrestricted Zip Extraction vulnerability","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.66.","status":"published","published":"2024-06-04T07:08:04.084Z","modified":"2026-04-28T16:08:26.323Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:35:34.55015Z"}],"euvd":[{"id":"EUVD-2023-38080","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.66.","status":"published","published":"2024-06-04T07:08:04Z","modified":"2026-04-28T16:08:26Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:24:08.747358Z"}],"ghsa":[{"id":"GHSA-w75h-h72p-cm23","title":"Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited...","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.66.","status":"published","published":"2024-06-04T09:30:56Z","modified":"2024-06-04T09:30:57Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:57:24.954889Z"}],"nvd":[{"id":"CVE-2023-33930","description":"Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Code Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.66.","status":"published","published":"2024-06-04T07:15:42.433Z","modified":"2026-06-17T06:02:32.457Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}