Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-66608 EUVD-2026-81502GHSA-gprx-48qq-vxqr

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability

Published Sep 17, 2026 · Updated Sep 17, 2026 · Assigned by Patchstack

Vendor: Unlimited Elements Product: Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

Description

Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.

Affected products

VendorProductAffectedFixed
Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) ≤ 2.0.19 —

References