Description
Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fast Themes | Sastra Essential Addons for Elementor | ≤ 1.2.3 | — |
High · 7.2
CVE-2026-118077
EUVD-2026-112994GHSA-p6c6-xmfv-h6p8
WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack