All vulnerabilities
CVE-2026-85568

Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter

Unknown Unlimited Elements for Elementor
Open in ThreatlineRecord JSON
CVSS
6.8Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.22%Chance of exploitation activity in the next 30 days, higher than 11% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2.0.21Fixed versionCVE List
Published3 Oct 2026Updated 3 Oct 2026CVE List

What fixes it

  • 2.0.21Unlimited Elements for ElementorCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewriting an already prepared SQL statement, allowing unauthenticated users to perform SQL injection attacks and to retrieve non-public content, when a related widget option is set away from its default.

Text from CVE List

Affected versions 1

  • Unlimited Elements for Elementoraffected: 1.5.139 before 2.0.21CVE List

References 1