Skip to content
OpenAdvisories
High · 8.8 CVE-2026-95534 EUVD-2026-94488GHSA-5v8m-ppqr-qj2h

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

Published Oct 7, 2026 · Updated Oct 7, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection.

This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.

Affected products

VendorProductAffectedFixed
Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) ≤ 2.0.19 —

References