8.5
High
CVE-2026-48837 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements For Elementor allows Blind SQL Injection. This issue affects Unlimited Elements For Elementor: from n/a through 2.0.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Unlimited Elements For Elementor 2.0 | earliest → 2.0.8 | No fix stated |