What is CVE-2026-28146?
CVE-2026-28146 is a vulnerability in the Unlimited Elements For Elementor plugin that allows users with the 'Contributor' role to download arbitrary files. This issue affects versions <= 2.0.14. Users are advised to update the plugin to the latest version.
Azərbaycanca: CVE-2026-28146, Unlimited Elements For Elementor plagini üçün aşkar edilmiş zəiflikdir. Bu boşluq 2.0.14 və daha əvvəlki versiyalarda 'Contributor' roluna malik istifadəçilərə ixtiyari faylları endirməyə imkan verir. İstifadəçilərə plagini ən son versiyaya yeniləmələri tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-284
FAQ2
Which plugin does CVE-2026-28146 affect?
This vulnerability affects the Unlimited Elements For Elementor plugin.
Which user role can download arbitrary files via CVE-2026-28146?
This vulnerability allows users with the 'Contributor' role to download arbitrary files.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.