Medium severity5.4NVD Advisory· Published Aug 3, 2026· Updated Aug 12, 2026

CVE-2026-28147

Description

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Unlimited Elements For Elementorinferred2 versions
<=2.0.15+ 1 more
- (no CPE)range: <=2.0.15
- (no CPE)range: <=2.0.15
Package: https://wordpress.org/plugins/unlimited-elements-for-elementor

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/unlimited-elements-for-elementor/vulnerability/wordpress-unlimited-elements-for-elementor-free-widgets-addons-templates-plugin-2-0-15-broken-access-control-vulnerabilitynvd

News mentions

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)
Wordfence Blog · Aug 14, 2026

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000