7.6
High
CVE-2026-40745 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through <= 8.4.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Element Pack Elementor Addons 8.4 | earliest → 8.4.2 | No fix stated |
Other CVEs of Element Pack Elementor Addons
The 13 CVEs of Element Pack Elementor Addons →
CVE-2026-108478
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Medium
CVE-2026-105873
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Medium
CVE-2026-105871
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Medium
CVE-2026-66574
Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions
6.5
Medium