CVE-2026-62121

Name of the Vulnerable Software and Affected Versions Unlimited Elements For Elementor versions prior to 2.0.27

Description An issue exists where the software allows Local File Inclusion, which occurs when an application includes a file without properly validating the input. Authenticated attackers with contributor-level access or higher can include and execute arbitrary files on the server. This can lead to the execution of PHP code, bypassing of access controls, or the retrieval of sensitive data, particularly when images or other safe file types are uploaded and then included.

Recommendations Update to a version newer than 2.0.26.