Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-85304 EUVD-2026-70554GHSA-mq9j-25qj-fq8w

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.17 - Broken Access Control vulnerability

Published Sep 3, 2026 · Updated Sep 3, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.17.

Affected products

VendorProductAffectedFixed
Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) ≤ 2.0.17 —

References