CVE-2026-95534

Published 7 October 2026 · tracked since 8 October 2026

Description

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.19.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-76266 HIGH 7.7
• CVE-2026-1403 MEDIUM 6.5
• CVE-2026-107229 MEDIUM 4
• CVE-2026-107353 MEDIUM 6.5
• CVE-2026-107161 HIGH 7.5
• CVE-2026-107313 MEDIUM 4.2
• CVE-2026-103371
• CVE-2026-107215 HIGH 7.5
• CVE-2026-107211
• CVE-2026-95606 CRITICAL 9.8

→ Open the live CVE board · all tools