Is CVE-2026-95534 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-95534?

CVE-2026-95534 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-95534

Description

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.