Is CVE-2026-28147 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-28147?

CVE-2026-28147 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-28147

Description

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15.