Vulnerabilities / Unlimited Elements For Elementor
Unlimited Elements For Elementor vulnerabilities
Advisories WPSec published for Unlimited Elements for Elementor. Other sources may list more. Its attack surface: Unlimited Elements For Elementor on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-05 | WPSEC-2026-0431 | Unlimited Elements For Elementor <= 2.0.22 - Authenticated (Contributor+) Limited Arbitrary Function Call via Post List 'includeby_function_name' Setting | High 7.6 | 2.0.23 |
| 2026-10-01 | WPSEC-2026-0030 | Unlimited Elements For Elementor < 2.0.21 - Unauthenticated SQL Injection via AJAX Search 'ucs' Parameter | Medium 5.9 | 2.0.21 |
| 2026-10-01 | WPSEC-2026-0029 | Unlimited Elements For Elementor < 2.0.21 - Authenticated (Contributor+) Information Exposure via Elementor Template and Layout Rendering | Medium 4.3 | 2.0.21 |
| 2026-10-01 | WPSEC-2026-0028 | Unlimited Elements For Elementor < 2.0.21 - Authenticated (Contributor+) SQL Injection via Terms 'Direct Children of Selected Terms' Setting | Medium 6.5 | 2.0.21 |
License: CC BY 4.0