CVE-2026-28146

Unlimited Elements for Elementor versions up to 2.0.14 are vulnerable to an arbitrary file download issue, allowing attackers to potentially access sensitive files on the server. This could lead to data exposure and compromise the integrity of the affected websites. Website administrators using this plugin should prioritize patching or upgrading to mitigate the risk associated with this vulnerability.