CVE-2022-47170

MEDIUM 4.8CVE-2022-47170 · Published 28/03/2023 · updated 17/06/2026

In short

CVE-2022-47170 is a MEDIUM (CVSS 4.8) vulnerability affecting unlimited elements for elementor (unlimited-elements).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.3% of all vulnerabilities.
Fix: update to 1.5.49 or later.

Package	Affected versions	Patched versions
unlimited elements for elementor unlimited-elements	`< 1.5.49`	`1.5.49`

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions.

References

patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-48-cross-site-scripting-xss · Third Party Advisory

More vulnerabilities in unlimited elements for elementor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unlimited elements for elementor

unlimited-elements

< 1.5.49

1.5.49

More vulnerabilities in unlimited elements for elementor

See all →