CVE-2026-66608

Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.

  • Published Sep 17, 2026
  • CVSS 6.4 medium
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-66608 at the National Vulnerability Database