HIGH 8.8 NVD

CVE-2026-95534

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.

References

https://patchstack.com/database/wordpress/plugin/unlimited-elements-for-elementor/vulnerab

Published: 2026-10-07 · Source: NVD · Feed updated: 2026-10-12

This high severity vulnerability with a CVSS score of 8.8 was published on 2026-10-07 via NVD.

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.