CVE-2026-57718

The Unlimited Elements For Elementor plugin has a security weakness in versions 2.0.12 and earlier, allowing malicious code injection through unsanitized input, which can then be executed by users when they visit the compromised page. This vulnerability enables unauthenticated attackers to inject arbitrary web scripts that will run whenever an affected page is accessed.

Based on public CVE data (MITRE/NVD).