CVE-2026-103341: WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
unlimited-elements-for-elementorto a version that resolves this vulnerability.Fixed in 2.0.21
Event History
Frequently Asked Questions
Does exploitation require an authenticated WordPress account or user interaction?
No. The supplied vector indicates that exploitation can be performed remotely without privileges or user interaction, and with low attack complexity.
What is the expected impact if this issue is exploited?
The provided severity vector indicates a low confidentiality impact. It does not indicate integrity or availability impact.
Which installations should be considered affected?
Installations using Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions through 2.0.20 should be considered affected. The affected version range begins at an unspecified earlier version.