Live › vulnerability › CVE-2026-62023
Unlimited Elements For Elementor, a WordPress plugin that adds widgets and templates to Elementor, has an access control flaw in versions through 2.0.26. The sources say an attacker can exploit incorrectly configured access control to get actions they should not be allowed to perform.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 19:25 UTC. All times on this page are UTC.
Sites running the Unlimited Elements For Elementor WordPress plugin at version 2.0.26 or earlier are in scope. The sources do not say which functions require an account or what an attacker can reach, so the exposure of any given site is unknown.
No product ranges from the sources yet.
unlimited-elements-for-elementor in the WordPress admin plugin list.2.0.26 or earlier.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.26.
This page as .md · .json · in your agent: get_signal("CVE-2026-62023")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.