Unitecms vulnerabilities

Products

• Unlimited Elements For Elementor 37
• Unlimited Elements For Elementor (free Widgets, Addons, Templates) 28
• Unlimited Elements For Elementor (premium) 2

Newest

• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerability CVE-2026-121579 6.5 MediumNovember 7, 2026
• unitecms unlimited elements for elementor Unlimited Elements for Elementor <= 2.0.26 - Unauthenticated Stored Cross-Site Scripting via RSS Feed Widget CVE-2026-116558 7.2 HighNovember 7, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Cross Site Scripting (XSS) vulnerability CVE-2026-62007 7.1 HighNovember 4, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Broken Access Control vulnerability CVE-2026-62023 4.3 MediumOctober 30, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerability CVE-2026-62121 6.5 MediumOctober 30, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability CVE-2026-115593 7.1 HighOctober 28, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability CVE-2026-95534 8.8 HighOctober 7, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability CVE-2026-94662 7.1 HighOctober 7, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability CVE-2026-105064 6.5 MediumOctober 5, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability CVE-2026-103355 Public exploit 9.3 CriticalOctober 4, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability CVE-2026-103344 7.1 HighOctober 4, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability CVE-2026-103342 7.1 HighOctober 3, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor 1.5.142 - 2.0.20 - Subscriber+ SQLi via get_addon_output_data CVE-2026-92923 6.3 MediumOctober 3, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter CVE-2026-85568 6.8 MediumOctober 3, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal CVE-2026-85015 6.6 MediumOctober 3, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution via get_addon_output_data CVE-2026-92924 5.4 MediumOctober 2, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor < 2.0.21 - Contributor+ Stored XSS via Icon Library Parameter CVE-2026-85016 6.8 MediumOctober 2, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability CVE-2026-103341 5.3 MediumOctober 1, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability CVE-2026-103338 8.5 HighOctober 1, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection CVE-2026-85017 7.5 HighSeptember 20, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-66608 6.4 MediumSeptember 17, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection CVE-2026-18561 7.5 HighSeptember 11, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting CVE-2026-77150 6.1 MediumSeptember 11, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability CVE-2026-84820 7.1 HighSeptember 8, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter CVE-2026-75586 6.1 MediumSeptember 5, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability CVE-2026-85304 5.3 MediumSeptember 3, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability CVE-2026-28146 6.5 MediumAugust 6, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability CVE-2026-28147 5.4 MediumAugust 3, 2026
• unitecms unlimited elements for elementor Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget CVE-2026-10081 8.8 HighJuly 20, 2026
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability CVE-2026-57718 7.1 HighJuly 13, 2026
• studio keren aga ltd. unlimited elements for elementor (premium) WordPress Unlimited Elements for Elementor (Premium) plugin <= 2.0.6 - Arbitrary File Upload vulnerability CVE-2026-27041 9.9 CriticalJune 17, 2026
• unitecms unlimited elements for elementor, unlimited elements for elementor +1 more WordPress Unlimited Elements For Elementor plugin <= 2.0.8 - SQL Injection vulnerability CVE-2026-48837 8.5 HighMay 25, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter CVE-2026-5486 6.5 MediumMay 14, 2026
• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal CVE-2026-4659 7.5 HighApril 17, 2026
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields CVE-2026-2724 7.2 HighMarch 10, 2026
• unitecms unlimited elements for elementor Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget CVE-2025-14274 5.4 MediumFebruary 3, 2026
• unitecms doubly – cross domain copy paste for wordpress Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import CVE-2025-14476 8.8 HighDecember 13, 2025
• unitecms unlimited elements for elementor, unlimited elements for elementor (premium) +1 more Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CVE-2025-13692 7.2 HighNovember 27, 2025
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-8603 6.4 MediumAugust 28, 2025
• unitecms unlimited elements for elementor Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1663 6.4 MediumApril 3, 2025
• unitecms unlimited elements for elementor Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget CVE-2024-13155 6.4 MediumFebruary 20, 2025
• unitecms unlimited elements for elementor Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2024-13153 6.4 MediumJanuary 9, 2025
• unitecms unlimited elements for elementor Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-10784 6.4 MediumDecember 12, 2024
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +1 more +3 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability CVE-2024-49271 9.1 CriticalOctober 16, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates), unlimited-elements unlimited elements for elementor +2 more WordPress Unlimited Elements for Elementor plugin <= 1.5.121 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-45454 7.1 HighOctober 6, 2024
• unitecms blox page builder Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload CVE-2024-6315 8.8 HighAugust 6, 2024
• unitecms unlimited elements for elementor, unlimited-elements unlimited elements for elementor \(free widgets\, addons\, templates\) +1 more Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' CVE-2024-6169 6.4 MediumJuly 9, 2024
• unitecms unlimited elements for elementor, unlimited-elements unlimited elements for elementor \(free widgets\, addons\, templates\) +1 more Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' CVE-2024-6170 6.4 MediumJuly 9, 2024
• Show olderLoading…