CVE-2026-103338: Unlimited Elements For Elementor Free Widgets, Addons, Templates

High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.

Affected products

• Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates: up to and including 2.0.20

Published 2026-10-01. Last modified 2026-10-01.