CVE-2026-66626

Thursday, September 17, 2026

7.6

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Summary

Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.

Vendor	Product	Version Range	Status
Sonal S Sinha	SKT Addons for Elementor	`n/a <= 4.0`	affected

CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Was this page helpful?

Sorry to hear that. Please tell us how we can improve.