CVE-2026-103355Suited to automated attack · CISA

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability

CVSS score

9.3

EPSS probability

%0.3

Risk score

0.0

Published

11 d ago

Overview Public Exploits (1)Newsroom Vulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Hassham1/CVE-2026-103355-unlimited-elements-sqli-poc

GitHub

CVE-2026-103355 - Unlimited Elements For Elementor <= 2.0.20 unauthenticated blind SQL injection via terms-listing identifiers (CVSS 9.3): Docker validation lab with vulnerable (2.0.20) vs patched (2.0.21) controls, read-only boolean-oracle PoC, nuclei version screen. Authorized security research only.

Public PoCSource updated: 05.10.2026 11:08:51

Similar Vulnerabilities

6.5

CVE-2026-28146

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability

VendorUnlimited ElementsProductUnlimited Elements For Elementor (Free Widgets, Addons, Templates)

Patch status unknownEPSS %02 mo ago

8.8

CVE-2026-95534

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

VendorUnlimited ElementsProductUnlimited Elements For Elementor (Free Widgets, Addons, Templates)

Patch status unknownEPSS %08 d ago

8.5

CVE-2026-103338