---
id: "CVE-2026-62023"
kind: "vulnerability"
aliases: ["CVE-2026-62023"]
title: "Unlimited Elements For Elementor: missing authorization lets users reach restricted functions"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["elementor", "package", "unlimited-elements-for-elementor", "wordpress"]
not_affected_if: ["plugin-not-installed"]
published_at: "2026-10-30T19:18:31+00:00"
first_seen_at: "2026-10-30T19:25:30+00:00"
updated_at: "2026-10-30T19:26:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62023", "first_seen_at": "2026-10-30T19:25:30+00:00"}]
---

# Unlimited Elements For Elementor: missing authorization lets users reach restricted functions

Unlimited Elements For Elementor, a WordPress plugin that adds widgets and templates to Elementor, has an access control flaw in versions through 2.0.26. The sources say an attacker can exploit incorrectly configured access control to get actions they should not be allowed to perform.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the plugin `unlimited-elements-for-elementor` in the WordPress admin plugin list.
- Confirm whether the installed version is `2.0.26` or earlier.

## Timeline

- 2026-10-30T19:25:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-62023

## From the sources

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.26.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_