CVE-2026-85568
Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewriting an already prepared SQL statement, allowing unauthenticated users to perform SQL injection attacks and to retrieve non-public content, when a related widget option is set away from its default.
| Vendor | unknown |
| Product | unlimited elements for elementor |
| Published | Oct 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown unlimited elements for elementor
Be the first to know when new unknown vulnerabilities affecting unknown unlimited elements for elementor are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Unlimited Elements for Elementor
1.5.139 < 2.0.21
References
Credits
Jakub Herman WPScan