Medium severity5.3NVD Advisory· Published Sep 3, 2026· Updated Sep 3, 2026

CVE-2026-85304

Description

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.17.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Unlimited Elements For Elementorllm-fuzzy
Range: <=2.0.17
Package: https://wordpress.org/plugins/unlimited-elements-for-elementor

Patches

Vulnerability mechanics

References

patchstack.com/database/wordpress/plugin/unlimited-elements-for-elementor/vulnerability/wordpress-unlimited-elements-for-elementor-free-widgets-addons-templates-plugin-2-0-17-broken-access-control-vulnerabilitynvd

News mentions

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)
Wordfence Blog · Sep 10, 2026
WordPress Plugins: 25 Vulnerabilities Disclosed in Batch, Ranging from Critical to Medium Severity
Vypr Intelligence · Sep 4, 2026

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000