Software intelligence
Important: Unlimited Elements For Elementor appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
39
Latest advisory
3 August 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
unlimited-elements-for-elementor
Plugin
This catalog lists 39 known advisories affecting Unlimited Elements For Elementor. The most recent was published on 3 August 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Unlimited Elements For Elementor <= 2.0.15 - Missing Authorization
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 3 August 2026
Unlimited Elements For Elementor <= 2.0.14 - Authenticated (Contributor+) Arbitrary File Download
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 3 August 2026
Unlimited Elements For Elementor <= 2.0.12 - Unauthenticated Stored Cross-Site Scripting
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 9 July 2026
Known Unlimited Elements For Elementor advisories published by month.
CVE-2026-28147 · Published 3 August 2026
Affected versions: ≤ 2.0.15
CVE-2026-28146 · Published 3 August 2026
Affected versions: ≤ 2.0.14
CVE-2026-57718 · Published 9 July 2026
Affected versions: ≤ 2.0.12
CVE-2026-10081 · Published 29 June 2026
Affected versions: ≤ 2.0.10
CVE-2026-48837 · Published 26 May 2026
Affected versions: ≤ 2.0.8
CVE-2026-5486 · Published 13 May 2026
Affected versions: ≤ 2.0.7
CVE-2024-13362 · Published 30 April 2026
Affected versions: ≤ 1.5.140
CVE-2026-4659 · Published 16 April 2026
Affected versions: ≤ 2.0.6
CVE-2026-2724 · Published 9 March 2026
Affected versions: ≤ 2.0.5
CVE-2025-14274 · Published 2 February 2026
Affected versions: ≤ 2.0.1
CVE-2025-13692 · Published 26 November 2025
Affected versions: ≤ 2.0
CVE-2025-8603 · Published 27 August 2025
Affected versions: ≤ 1.5.148
CVE-2025-1663 · Published 2 April 2025
Affected versions: ≤ 1.5.142
CVE-2024-13155 · Published 19 February 2025
Affected versions: ≤ 1.5.140
CVE-2024-13153 · Published 8 January 2025
Affected versions: ≤ 1.5.135
SiteRespond Defence matches your installed Unlimited Elements For Elementor version against this catalog when the Defence plugin is connected to your WordPress site.