Unlimited Elements for Elementor XSS Vulnerability (CVE-2026-103344): Update to 2.0.21+ Now (2026)
There’s a serious new Unlimited Elements for Elementor vulnerability that every WordPress site owner running this popular Elementor addon needs to know about. In October 2026, security researchers disclosed CVE-2026-103344: a HIGH-severity reflected cross-site scripting (XSS) flaw affecting every version of the plugin through 2.0.20. The attacker needs no account on your site — one … Read more
