A SQL injection vulnerability exists in ProLancer Element plugin versions up to 1.4.8. This issue allows a subscriber to inject malicious SQL code. The vulnerability has a CVSS score of 8.5 and is considered high severity.
A Subscriber Broken Access Control vulnerability exists in ProLancer Element plugin versions up to 1.4.8. This issue allows attackers to bypass access controls, potentially leading to unauthorized actions within the plugin's functionality.
