Skip to content
OpenAdvisories
High · 7.1 CVE-2026-84820 EUVD-2026-72643GHSA-pmv9-cx7p-8m6f

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Cross Site Scripting (XSS) vulnerability

Published Sep 8, 2026 · Updated Sep 8, 2026 · Assigned by Patchstack

Vendor: Unlimited Elements Product: Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

Description

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

Affected products

VendorProductAffectedFixed
Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) ≤ 2.0.17 —

References