What is the CVSS score of CVE-2026-92923?

CVE-2026-92923 has a CVSS 3.1 base score of 6.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Is there a public PoC exploit available for CVE-2026-92923?

Yes, a public proof-of-concept exploit is available for CVE-2026-92923. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-92923?

Yes, a patch is available for CVE-2026-92923. Update the affected software to the latest version immediately.

Unlimited Elements for Elementor CVE-2026-92923

EUVD-2026-91946 MEDIUM

SQL Injection (CWE-89)

2026-10-03 WPScan

GHSA-fwfj-g2x9-rghp

WordPress SQLi Unlimited Elements For Elementor Unknown

6.3

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

6.3 MEDIUM

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

vuln.today AI

6.3 MEDIUM

Network-reachable but needs a low-privileged account (PR:L); blind inferential extraction raises complexity (AC:H); injection into the backend DB crosses a trust boundary (S:C) yielding high confidentiality but no integrity/availability impact.

3.1 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Oct 03, 2026 - 16:27 vuln.today

Patch available

Oct 03, 2026 - 07:00 EUVD

CVE Published

Oct 03, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

CVE Published

Oct 03, 2026 - 06:00 cve.org

MEDIUM 6.3

DescriptionCVE.org

The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as low as subscriber to perform blind SQL injection attacks and read arbitrary data from the database. Version 2.0.18 removed the subscriber-level access, so from 2.0.18 onward the issue requires a Contributor role or above.

AnalysisAI

Blind SQL injection in the Unlimited Elements for Elementor WordPress plugin (all releases before 2.0.21) allows an authenticated attacker to pass a crafted parameter that is concatenated into a SQL statement without sanitisation or escaping, letting them infer and read arbitrary data from the site database. On versions before 2.0.18 a Subscriber-level account is enough, which is significant on sites that permit open user registration, while versions 2.0.18 through 2.0.20 require a Contributor-level account or higher because 2.0.18 removed the subscriber-accessible code path. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires an authenticated WordPress account on the affected site: a Subscriber-level (or higher) account on versions before 2.0.18, or a Contributor-level (or higher) account on versions 2.0.18 through 2.0.20, because 2.0.18 removed subscriber-level access to the vulnerable code path. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Signals are consistent and point to a moderate, authentication-gated risk rather than an urgent emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patch: 2.0.21. … Detailed patch versions, workarounds, and compensating controls in full report.