WordPress Unlimited Elements Plugin <=2.0.19 PHP Object Injection Vulnerability

Vulnerability Overview Vulnerability Name: WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 2.0.19 contains a medium-priority PHP Object Injection vulnerability. Vulnerability Type: PHP Object Injection CVSS Score: 8.8 Risk Description: The likelihood of exploitation is high; attackers can leverage this vulnerability for large-scale attacks on websites, regardless of traffic volume or popularity. Affected Scope Affected Versions: <= 2.0.19 Fixed Version: 2.0.20 or higher Remediation 1. Automatic Mitigation: - Patchstack has released mitigation rules that can block attacks before you update to the fixed version. - Using Patchstack automatically mitigates vulnerabilities and keeps your website secure. 2. Manual Update: - Update the plugin to version 2.0.20 or higher to resolve the vulnerability. - Patchstack users can enable automatic updates to automatically update only affected plugins. Additional Information Reporter: Ayukiab Report Date: September 2026 Publication Date: October 2, 2026 Related Links Learn More Get Started with Patchstack FAQs How does Patchstack provide the fastest protection? How does Patchstack mitigate vulnerabilities? Why are hackers targeting my website? What if my website is already compromised? Subscribe Weekly WordPress security intelligence delivered directly to your inbox. Footer Information Vulnerability mitigation: Pricing, Application security (SCA), RapidMitigate, Threat Intelligence (API), VS Monarx, VS Imunify360, VS Worfence, Documentation, Service status, Log in Code security: Managed VDP, Active VDP directory, Report vulnerability, Security auditing, Compliance (DRA), Log in Bug bounty: Bug bounty, Leaderboard, Guidelines, Learn, Report, Discord, Log in Use cases: Web developers, Webhosts, Software vendors, WordPress, WooCommerce Resources: Partners, Vulnerability database, Whitepaper 2026, Articles, Case studies, Webinars, Vulnerability statistics Patchstack: About, Compliance, Careers, Merch store, Media kit, LinkedIn, Facebook, X Copyright Information © 2026 Patchstack DPA Privacy Policy Accessibility Terms & Conditions Navbar Pricing Case studies Login Start trial Advertisement Get the fastest vulnerability mitigation with Patchstack! Get started Summary This is a medium-priority PHP Object Injection vulnerability affecting versions <= 2.0.19 of the WordPress Unlimited Elements For Elementor plugin. It is recommended to immediately update to version 2.0.20 or higher, or use Patchstack’s automatic mitigation feature to protect your website.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Unlimited Elements Plugin <=2.0.19 PHP Object Injection Vulnerability

More from this source