CVE-2026-66626
7.6 HIGH 7.6Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.
Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.
Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.
Administrator SQL Injection in Newsletters <= 4.18 versions.
Administrator SQL Injection in WP Maps <= 4.9.9 versions.
Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.
Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.
Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions.
Contributor Cross Site Scripting (XSS) in PropertyHive <= 2.2.6 versions.