OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-103338

HIGH · CVSS 8.5 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-10-01 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

Unlimited Elements For Elementor is vulnerable to a Blind SQL Injection due to improper neutralization of special elements in SQL commands, potentially allowing attackers to execute arbitrary SQL queries. This high-severity vulnerability could lead to unauthorized data access or manipulation, making it critical for users of this plugin, particularly web developers and site administrators, to prioritize immediate patching or mitigation efforts.

CVE
CVE-2026-103338
Severity
HIGH
CVSS
8.5
EPSS
0.21%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Blind SQL Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.