CVE-2026-66608: Unlimited Elements For Elementor Free Widgets, Addons, Templates

Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.

Affected products

• Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates: up to and including 2.0.19

Published 2026-09-17. Last modified 2026-09-17.