PT-2026-50297 · Studio Keren Aga+1 · Unlimited Elements For Elementor+1

Phat Rio

·

CVE-2026-27041

·

Published

2026-03-16

·

Updated

2026-06-17

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Unlimited Elements for Elementor (Premium) versions prior to 2.0.7
Description Authenticated attackers with Contributor-level access and above can upload arbitrary files to the server due to missing file type validation. This flaw may lead to remote code execution, which is the ability of an attacker to execute malicious commands on a remote machine.
Recommendations Update to a version newer than 2.0.6.

Fix

RCE

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-27041

Affected Products

Unlimited Elements For Elementor
Unlimited-Elements-For-Elementor-Premium