Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, , CVE-2026-40745
- CVE, Research URL
- Published on
- Apr 15, 2026
- Research Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through <= 8.4.2.
- Affected versions
-
max 8.5.0.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Shortcode for Google Street View (CVE-2025-11808) , Dec 10, 2025 |