Threats tagged 'ghsa-crjc-75c2-rpr6'

CVE-2026-28147 is a missing authorization vulnerability in the Unlimited Elements For Elementor plugin (Free Widgets, Addons, Templates) affecting versions up to and including 2.0.15. This flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 5.4. No official patch or remediation guidance is currently available from the vendor.