Log in Start free

unitecms

Products

ProductCVEsExploitedLatest
Unlimited Elements For Elementor27–Sep 11, 2026
Addon Library1–Feb 24, 2024
Blox Page Builder1–Aug 6, 2024
Doubly – Cross Domain Copy Paste for WordPress1–Dec 13, 2025
Unlimited Addons for WPBakery Page Builder1–Feb 5, 2024
Unlimited Elements for Elementor (Premium)1–Nov 27, 2025

Exploited and recent CVEs

  • CVE-2026-18561 High 7.5 Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection 0.6%
  • CVE-2026-77150 Medium 6.1 Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting 0.4%
  • CVE-2026-75586 Medium 6.1 Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter 0.4%
  • CVE-2026-5486 Medium 6.5 Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter 0.5%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2026-4659 High 7.5 Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal 0.9%
  • CVE-2026-2724 High 7.2 Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields 0.4%
  • CVE-2025-14274 Medium 5.4 Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget 0.2%
  • CVE-2025-14476 High 8.8 Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import 0.5%
  • CVE-2025-13692 High 7.2 Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2025-13692 High 7.2 Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2025-8603 Medium 6.4 Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-1663 Medium 6.4 Unlimited Elements For Elementor <= 1.5.142 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13155 Medium 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.140 - Authenticated (Contributor+) Stored Cross-Site Scripting via Transparent Split Hero Widget 0.4%
  • CVE-2024-13153 Medium 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.135 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
  • CVE-2024-10784 Medium 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.126 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-6315 High 8.8 Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload 1.0%
  • CVE-2024-6169 Medium 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'username' 0.5%
  • CVE-2024-6170 Medium 6.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email' 0.5%
  • CVE-2024-6166 High 8.8 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - Authenticated (Contributor+) Time-Based SQL Injection 0.5%
  • CVE-2024-6171 Medium 5.3 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.112 - IP Address Spoofing to Antispam Bypass 0.2%
  • CVE-2024-5329 High 8.8 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter 0.5%
  • CVE-2024-3190 Medium 5.4 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.107 - Authenticated (Contributor+) Stored Cross-Site Scripting via Text Field 0.3%
  • CVE-2023-6743 High 8.8 Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import 1.3%
  • CVE-2024-4779 High 8.8 Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] 0.5%
  • CVE-2024-3055 High 8.8 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Contributor+) SQL Injection 0.8%
  • CVE-2024-3547 Medium 6.1 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Reflected Cross-Site Scripting 0.4%
  • CVE-2024-2662 High 7.2 Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.102 - Authenticated (Admin+) Command Injection 1.7%
  • CVE-2024-0367 Medium 6.4 Unlimited Elements For Elementor <= 1.5.96 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Link 0.3%
  • CVE-2024-1710 High 8.8 Addon Library <= 1.3.76 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload 0.7%