WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Unlimited Elements For Elementor

Elementor all-in-one addons pack with the best widgets for Elementor, offering 100+ free widgets, templates, and tools to create stunning websites!

37Reported vulnerabilities
9.9Highest CVSS score
2.0.16Latest version
300,000+Active installs

What to do now

Update Unlimited Elements For Elementor to 2.0.18 or later. 37 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 30, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-31090 Critical 9.9 0.8% 1.5.60 and earlier 1.5.61 May 22, 2023
CVE-2023-33930 Critical 9.9 0.5% 1.5.66 and earlier 1.5.67 May 22, 2023
CVE-2024-6170 Medium 5.4 0.5% Before 1.5.113 1.5.113 July 9, 2024
CVE-2024-6169 Medium 5.4 0.5% Before 1.5.113 1.5.113 July 9, 2024
CVE-2023-6743 High 8.8 1.3% 1.5.89 and earlier 1.5.91 May 29, 2024
CVE-2023-3295 High 8.8 1.3% Before 1.5.67 1.5.67 June 17, 2023
CVE-2024-3055 High 8.8 0.8% Before 1.5.105 1.5.105 May 14, 2024
CVE-2024-6166 High 8.8 0.5% Before 1.5.113 1.5.113 July 9, 2024
CVE-2024-5329 High 8.8 0.5% Before 1.5.110 1.5.110 June 6, 2024
CVE-2024-4779 High 8.8 0.5% Before 1.5.108 1.5.108 May 23, 2024
CVE-2026-4659 High 7.5 0.9% 0 to 2.0.6 (inclusive) 2.0.7 April 17, 2026
CVE-2024-2662 High 7.2 1.7% Before 1.5.103 1.5.103 May 14, 2024
CVE-2024-49271 High 7.2 1.1% 1.5.121 and earlier 1.5.122 October 14, 2024
CVE-2026-57718 High 7.2 0.3% 2.0.12 and earlier 2.0.13 July 9, 2026
CVE-2026-10081 High 7.2 0.3% 2.0.10 and earlier 2.0.11 June 29, 2026
CVE-2026-2724 High 7.2 0.3% 0 to 2.0.5 (inclusive) 2.0.6 March 10, 2026
CVE-2025-13692 High 7.2 0.3% 0 to 2.0 (inclusive)
0 to 2.0 (inclusive)		 2.0.1 November 27, 2025
CVE-2026-28146 Medium 6.5 0.3% 2.0.14 and earlier 2.0.15 August 3, 2026
CVE-2026-48837 Medium 6.5 0.4% 2.0.8 and earlier 2.0.9 May 26, 2026
CVE-2026-5486 Medium 6.5 0.5% 0 to 2.0.7 (inclusive) 2.0.8 May 14, 2026
CVE-2025-8603 Medium 6.4 0.2% 0 to 1.5.148 (inclusive) 1.5.149 August 28, 2025
CVE-2024-29792 Medium 6.1 0.7% 1.5.93 and earlier 1.5.94 March 25, 2024
CVE-2023-31080 Medium 6.3 0.4% 1.5.65 and earlier 1.5.66 June 20, 2023
CVE-2026-75586 Medium 6.1 0.2% 0 to 2.0.17 (inclusive) 2.0.18 September 5, 2026
CVE-2024-45454 Medium 6.1 0.3% 1.5.121 and earlier 1.5.122 September 30, 2024
CVE-2024-3547 Medium 6.1 0.4% Before 1.5.103 1.5.103 May 14, 2024
CVE-2024-13155 Medium 5.4 0.3% Before 1.5.141 1.5.141 February 20, 2025
CVE-2024-13153 Medium 5.4 0.3% Before 1.5.136 1.5.136 January 9, 2025
CVE-2024-10784 Medium 5.4 0.3% Before 1.5.127 1.5.127 December 12, 2024
CVE-2024-0367 Medium 5.4 0.3% 1.5.96 and earlier 1.5.97 March 30, 2024
CVE-2025-14274 Medium 5.4 0.2% 0 to 2.0.1 (inclusive) 2.0.2 February 3, 2026
CVE-2025-1663 Medium 5.4 0.2% 1.5.142 and earlier 1.5.143 April 3, 2025
CVE-2024-6171 Medium 5.3 0.2% Before 1.5.113 1.5.113 July 9, 2024
CVE-2024-3190 Medium 4.6 0.3% Before 1.5.108 1.5.108 May 30, 2024
CVE-2022-47170 Medium 4.4 0.4% 1.5.48 and earlier 1.5.49 January 27, 2023
CVE-2026-28147 Medium 4.3 0.2% 2.0.15 and earlier 2.0.16 August 3, 2026
CVE-2024-35674 Medium 4.3 0.4% 1.5.109 and earlier 1.5.110 June 5, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.