The Unlimited Elements For Elementor plugin for WordPress, which includes free widgets, addons, and templates, has a security vulnerability. This allows attackers, who have Contributor-level access or higher, to insert harmful web scripts into pages. These scripts will run whenever a user visits the affected page.