Skip to content
OpenAdvisories
High · 7.6 CVE-2026-40745 EUVD-2026-22899GHSA-82v2-5hpx-rj8w

WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability

Published Apr 15, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through <= 8.4.2.

Affected products

VendorProductAffectedFixed
bdthemes Element Pack Elementor Addons ≤ 8.4.2 —

References