CVE-2026-57718

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through <= 2.0.12.

We have discovered 28,274 live websites that are affected by CVE-2026-57718.

Run a Free Instant Scan



Affected Software

Product  Unlimited Elements For Elementor
Category Wordpress Plugins
Vulnerable Domains28,274 live websites (100% of Unlimited Elements For Elementor install base)
Vulnerable Versions
  • from 0 through 2.0.12
Vulnerable Versions Count108 versions ( 99% of all versions)



Details

  • Published - Jul 13, 2026
  • Updated - Jul 13, 2026

Credits

  • Taylsec | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-57718
United States8,334 websites


Germany2,732 websites
France1,293 websites
GB1,239 websites
India1,012 websites
Italy1,005 websites
Brazil808 websites
Spain688 websites
Cyprus682 websites
Canada642 websites

Website Distribution by TLD

Number of websites using CVE-2026-57718
.com12,820 websites
.de1,570 websites
.org1,074 websites
.it760 websites
.com.br752 websites
.co.uk675 websites
.fr570 websites
.nl524 websites
.com.au523 websites
.net487 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-57718

Top websites that are affected by CVE-2026-57718. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******.***.br Brazil**,***
*************.com United States**,***
*******.at Austria**,***
**************.com United States**,***
******.com United States**,***
******.com Germany**,***
******.com Cyprus**,***
*****************.org United States**,***
***********.cl Chile**,***
***********.com Israel**,***
See full domain list

FAQ

A total of 28,274 websites have been identified as vulnerable to CVE-2026-57718, based on global website indexing conducted by WebTechSurvey.
The Unlimited Elements For Elementor is affected by the CVE-2026-57718 vulnerability.
Unlimited Elements For Elementor versions up to and including 2.0.12 are vulnerable to CVE-2026-57718.