Critical · 9.9 CVE-2023-31231 EUVD-2023-35546GHSA-3hjw-qfch-vr79

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload

Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Unlimited Elements Product: Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.

Affected products

Vendor	Product	Affected	Fixed
Unlimited Elements	Unlimited Elements For Elementor (Free Widgets, Addons, Templates)	≤ 1.5.65	—

References

https://patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-65-arbitrary-file-upload-vulnerability?_s_id=cve vdb-entry