PT-2026-67195 · Unlimited Elements · Unlimited Elements For Elementor

CVE-2026-28147 · Publicado 2026-08-03 · Atualizado 2026-08-03

Mitre

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-28147

Produtos afetados

Unlimited Elements For Elementor

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-28147 · Nota de Segurança
• https://patchstack.com/database/wordpress/plugin/unlimited-elements-for-elementor/vulnerability/wordpress-unlimited-elements-for-elementor-free-widgets-addons-templates-plugin-2-0-15-broken-access-control-vulnerability?_s_id=cve · Nota