8.5
High
CVE-2026-25007 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Element Invader…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Blind SQL Injection.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ElementInvader Addons for Elementor 1.4 | earliest → 1.4.2 | No fix stated |
Other CVEs of ElementInvader Addons for Elementor
The 10 CVEs of ElementInvader Addons for Elementor →
CVE-2026-57376
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
7.1
High
CVE-2026-25028
Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor…
5.4
Medium
CVE-2025-58205
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
6.5
Medium
CVE-2025-48288
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
6.5
Medium