unitecms vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202417
3. 20256
4. 20268

Newest CVEs

• CVE-2026-18561

  Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection

  unitecms · Unlimited Elements For Elementor

  High7.5
• CVE-2026-77150

  Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting

  unitecms · Unlimited Elements For Elementor

  Medium6.1
• CVE-2026-75586

  Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter

  unitecms · Unlimited Elements For Elementor

  Medium6.1
• CVE-2026-5486

  Unlimited Elements For Elementor <= 2.0.7 - Authenticated (Contributor+) SQL Injection via 'filter_search' Parameter

  unitecms · Unlimited Elements For Elementor

  Medium6.5
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-4659

  Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal

  unitecms · Unlimited Elements For Elementor

  High7.5
• CVE-2026-2724

  Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields

  unitecms · Unlimited Elements For Elementor

  High7.2
• CVE-2025-14274

  Unlimited Elements for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Border Hero Widget

  unitecms · Unlimited Elements For Elementor

  Medium5.4
• CVE-2025-14476

  Doubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File Import

  unitecms · Doubly – Cross Domain Copy Paste for WordPress

  High8.8
• CVE-2025-13692

  Unlimited Elements For Elementor and Unlimited Elements For Elementor (Premium) <= 2.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

  unitecms · Unlimited Elements for Elementor (Premium)

  High7.2