The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress had a security issue that allowed attackers with contributor-level permissions to upload malicious files to the server. This could have allowed them to remotely execute code on the affected site. The issue was partially fixed in version 1.5.66 and completely fixed in version 1.5.67.