A vulnerability was found in Xpro Elementor Addons Plugin up to 1.5.1 on WordPress. It has been declared as critical. Affected by this issue is some unknown functionality. The manipulation results in sql injection.
This vulnerability is reported as CVE-2026-45214. The attack can be launched remotely. No exploit exists.