CVE-2026-103341: WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability

Q: Does exploitation require an authenticated WordPress account or user interaction?

No. The supplied vector indicates that exploitation can be performed remotely without privileges or user interaction, and with low attack complexity.

Q: What is the expected impact if this issue is exploited?

The provided severity vector indicates a low confidentiality impact. It does not indicate integrity or availability impact.

Q: Which installations should be considered affected?

Installations using Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions through 2.0.20 should be considered affected. The affected version range begins at an unspecified earlier version.

Published Oct 1, 2026

Updated

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.

Affected Software

1 affected component

Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates)<=2.0.20

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade unlimited-elements-for-elementor to a version that resolves this vulnerability.
Fixed in 2.0.21

Event History

Oct 1, 2026

CVE Published

via MITRE·12:26 PM

Data Sourced

via MITRE·12:26 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require an authenticated WordPress account or user interaction?

No. The supplied vector indicates that exploitation can be performed remotely without privileges or user interaction, and with low attack complexity.

What is the expected impact if this issue is exploited?

The provided severity vector indicates a low confidentiality impact. It does not indicate integrity or availability impact.

Which installations should be considered affected?

Installations using Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions through 2.0.20 should be considered affected. The affected version range begins at an unspecified earlier version.

CVE-2026-103341: WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected impact if this issue is exploited?

Which installations should be considered affected?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require an authenticated WordPress account or user interaction?

What is the expected impact if this issue is exploited?

Which installations should be considered affected?