This vulnerability arises from insecure deserialization of untrusted data in the Unlimited Elements For Elementor plugin, which can be exploited to perform command injection. The affected versions include all versions up to 1.5.121. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity but requires high privileges. Successful exploitation results in full compromise of the affected system's confidentiality, integrity, and availability.

If exploited, this vulnerability allows an attacker with high privileges to execute arbitrary commands on the affected system, potentially leading to full system compromise. The impact includes complete loss of confidentiality, integrity, and availability of the system running the vulnerable plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin and monitor for suspicious activity. Avoid using affected versions and consider disabling the plugin if possible.