7.6
Élevée
CVE-2026-40745 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through <= 8.4.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Element Pack Elementor Addons 8.4 | premières → 8.4.2 | Pas de correctif indiqué |
Autres CVE de Element Pack Elementor Addons
Les 13 CVE de Element Pack Elementor Addons →
CVE-2026-108478
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Moyenne
CVE-2026-105873
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Moyenne
CVE-2026-105871
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element…
6.5
Moyenne
CVE-2026-66574
Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions
6.5
Moyenne