CVE-2026-116558 | UniteCMS Unlimited Elements for Elementor Plugin up to 2.0.26 on WordPress RSS Feed Widget inside the attacker-controlled RSS feed body cross site scripting

A vulnerability described as problematic has been identified in UniteCMS Unlimited Elements for Elementor Plugin up to 2.0.26 on WordPress. The impacted element is an unknown function of the component RSS Feed Widget. Executing a manipulation of the argument inside the attacker-controlled RSS feed body can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-116558. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More