8.5
High
CVE-2024-37090 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Masterstudy Elementor Widgets, StylemixThemes Consulting Elementor Widgets.This issue affects Masterstudy Elementor Widgets: from n/a through 1.2.2; Consulting Elementor Widgets: from n/a through 1.3.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Masterstudy Elementor Widgets 1.2 | earliest → 1.2.2 | No fix stated |
| Consulting Elementor Widgets 1.3 | earliest → 1.3.0 | No fix stated |
Other CVEs of Masterstudy Elementor Widgets
The 5 CVEs of Masterstudy Elementor Widgets →
CVE-2025-64211
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows…
5.3
Medium
CVE-2025-64210
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows…
5.4
Medium
CVE-2024-37269
Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly…
5.3
Medium
CVE-2024-37091
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes…
9.9
Critical