7.6
Élevée
CVE-2026-40745 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through <= 8.4.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Element Pack Elementor Addons 8.4 | premières → 8.4.2 | Pas de correctif indiqué |
Autres CVE de Element Pack Elementor Addons
Les 14 CVE de Element Pack Elementor Addons →
CVE-2026-119501
WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability
6.5
Moyenne
CVE-2026-108478
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Moyenne
CVE-2026-105873
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Moyenne
CVE-2026-105871
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Moyenne