cleantalk
Vulnerabilities and Security Researches

Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, , CVE-2026-40745

CVE, Research URL

CVE-2026-40745

Published on
Apr 15, 2026
Research Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through <= 8.4.2.
Affected versions
max 8.5.0.
Status
vulnerable