What is CVE-2026-28147?

CVE-2026-28147 is a medium-severity vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates), classified under Missing Authorization. CVSS score: 5.4/10. Published 2026-08-03.

How severe is CVE-2026-28147?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Auth bypass in Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

CVE-2026-28147

Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements Fo…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L.

Affected products

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) — versions n/a

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

audit@patchstack.com (vdb-entry)

Frequently asked questions

What is CVE-2026-28147?: CVE-2026-28147 is a medium-severity vulnerability in Unlimited Elements For Elementor (Free Widgets, Addons, Templates), classified under Missing Authorization. CVSS score: 5.4/10. Published 2026-08-03.
How severe is CVE-2026-28147?: Medium severity. CVSS v3 base score is 5.4 out of 10.