Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-28147 EUVD-2026-52227GHSA-crjc-75c2-rpr6

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.15 - Broken Access Control vulnerability

Published Aug 3, 2026 · Updated Aug 3, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15.

Affected products

VendorProductAffectedFixed
Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) ≤ 2.0.15 —

References