CVE-2024-45454: Unlimited-Elements Unlimited Elements For Elementor

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 1.5.121.

Affected products

• Unlimited-Elements Unlimited Elements For Elementor: before 1.5.122 (fixed in 1.5.122)

Published 2024-10-06. Last modified 2026-06-17.