A vulnerability was found in Xpro Elementor Addons Plugin up to 1.5.1 on WordPress. It has been declared as critical . Affected by this issue is some unknown functionality. The manipulation results in sql injection. This vulnerability is reported as CVE-2026-45214 . The attack can be launched remotely. No exploit exists.