CVE-2026-103344

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor (Free Widgets, Addons, Templates) versions prior to 2.0.21

Description An issue involving improper neutralization of input during web page generation allows for Reflected Cross-site Scripting (XSS), a technique where malicious scripts are injected into trusted websites and reflected back to the user.

Recommendations Update Unlimited Elements For Elementor (Free Widgets, Addons, Templates) to version 2.0.21 or later.