CVE-2026-66626 Sonal S Sinha CVE debrief

Who should care

Defenders responsible for WordPress installations with the SKT Addons for Elementor plugin should assess exposure and apply patches or mitigations.

Why it matters

A high-severity SQL injection vulnerability exists in SKT Addons for Elementor versions 4.0 and earlier, which could lead to compromise or data exposure if exploited.

• Verify exposure by checking installed versions of SKT Addons for Elementor.
• Apply patches or mitigations as available to prevent potential exploitation.
• Monitor for potential exploitation attempts to detect potential compromise.

Technical summary

The SKT Addons for Elementor plugin versions 4.0 and earlier contain a SQL injection vulnerability. This vulnerability has been recorded by the CVE Program and NVD with a CVSS score of 7.6.

Defensive priority

Defenders should prioritize verifying exposure and applying patches or mitigations.

Recommended defensive actions

• Verify exposure by checking installed versions of SKT Addons for Elementor.
• Apply patches or mitigations as available.
• Monitor for potential exploitation attempts.

Evidence notes

The CVE Program and NVD provide official records of this vulnerability. Patchstack has reported details on the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.