8.5
Élevée
CVE-2026-25007 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Element Invader…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Blind SQL Injection.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.4.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ElementInvader Addons for Elementor 1.4 | premières → 1.4.2 | Pas de correctif indiqué |
Autres CVE de ElementInvader Addons for Elementor
Les 10 CVE de ElementInvader Addons for Elementor →
CVE-2026-57376
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
7.1
Élevée
CVE-2026-25028
Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor…
5.4
Moyenne
CVE-2025-58205
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
6.5
Moyenne
CVE-2025-48288
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader…
6.5
Moyenne