Vulnerability · Published Oct 3, 2026 · Assigned by WPScan

CVE-2026-85015Unlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path Traversal

Medium 6.6

In plain English

A medium-severity path traversal in Unlimited Elements for Elementor from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)6.6Medium

Exploit odds (30 days)0.4%top 64.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with access to its asset-management feature (Administrators by default, or Editors when a non-default Unlimited Elements for Elementor WordPress plugin before 2.0.21 setting is enabled) to write arbitrary files, including executable PHP, outside the intended upload directory on servers where the PHP zip extension is unavailable, leading to Remote Code Execution.

Affected products (as reported)

Vendor	Product	Versions
Unknown	Unlimited Elements for Elementor	0 – before 2.0.21

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://wpscan.com/vulnerability/aefcaecf-024d-4ec7-9b67-69d21addea7b/ exploit, vdb-entry, technical-description