Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Unlimited Elements

First CVE: Mar 28, 2023Active for: 3 yearsTotal CVEs: 55

Unlimited Elements develops a plugin ecosystem for the Elementor page builder platform, offering a suite of widgets, addons, and template libraries that extend the builder's design and functionality capabilities. Despite a narrow product line, the vendor's disclosures reach a prominent position in the vulnerability landscape, reflecting the broad install base of Elementor-dependent sites and the supply-chain effect of plugin dependencies in WordPress-adjacent ecosystems. The vendor's vulnerability patterns have not yet coalesced around a dominant weakness class, suggesting exposure across varied implementation boundaries within its addon and widget offerings. Defenders should treat Elementor plugin dependencies as part of their site-hardening inventory, particularly where multiple addons layer on the same underlying builder; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
28
Total CVEs
More Total CVEs than 97% of tracked vendors
2.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 90% of tracked vendors
7.0
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Unlimited Elements over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 28, 2023
3 years ago
Most Recent CVE
May 25, 2026
62 days ago

Products(3 total)

Top CVEs

Signals from CVEs in this vendor scope (28 CVEs).

28 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-48837HIGH
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affec
May 25, 20268.531NONO
CVE-2024-29792MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Tem
Mar 27, 20246.127NOYES
CVE-2024-6166HIGH
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘addons_order’ parameter in all versio
Jul 9, 20248.826NONO
CVE-2024-5329HIGH
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to blind SQL Injection via the ‘data[addonID]’ parameter in all versions u
Jun 6, 20248.826NONO
CVE-2023-6743HIGH
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.89 via
May 29, 20248.826NONO
CVE-2024-4779HIGH
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injection via the ‘data[post_ids][0]’ parameter in all versions up
May 23, 20248.826NONO
CVE-2023-31090HIGH
Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Upload a Web Shell to
Apr 24, 20248.825NONO
CVE-2023-3295HIGH
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the fil
Jun 17, 20238.825NONO
CVE-2024-35674HIGH
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor.This issue affects Unl
Jun 5, 20248.824NONO
CVE-2024-3055HIGH
The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to,
May 14, 20248.824NONO
View all 28 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products28 CVEs
50%
50%
Severity distribution among all CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network28 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low28 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None16 (57.1%)
Unknown0 (0.0%)
Required12 (42.9%)
Privileges Required
Low20 (71.4%)
High4 (14.3%)
None4 (14.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (28 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
3.6% of CVEs· 95th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Unlimited Elements.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Unlimited Elements — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Unlimited Elements's Products

View all 2 CNAs →

Top CWEs