CVE Database /
CVE-2026-24956
CVE · Critical
CVE-2026-24956 — Download Manager Addons for Elementor [wpdm-elementor] < 2.0.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-24956
|
Download Manager Addons for Elementor [wpdm-elementor] < 2.0.0 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.3
|
< 2.0.0
|
2.0.0 |
2026-02-11 |
—
|
CVE-2026-24956
The Elementor Download Manager Addons plugin for WordPress has a security flaw in versions 1.3.0 and earlier, allowing malicious input to disrupt the way the plugin handles database interactions. This vulnerability enables unauthorized access to sensitive data by injecting arbitrary SQL code into existing queries. As a result, attackers can potentially extract confidential information from the affected site's database without needing authentication credentials.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings