CVE-2023-31231

Severity

CRITICAL

CVSS

9.9

EPSS

0.00652

Risk score

39.83

CISA KEV

PoC

Published

2023-12-20

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2023-35546, GHSA-3HJW-QFCH-VR79

Products

unitecms:Unlimited Elements For Elementor (Free Widgets, Addons, Templates) n/a ≤1.5.65

Sources

euvd EUVD-2023-35546

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-35546
https://patchstack.com/database/vulnerability/unlimited-elements-for-elementor/wordpress-unlimited-elements-for-elementor-plugin-1-5-65-arbitrary-file-upload-vulnerability?_s_id=cve