CVE-2026-2413

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 12, 2026

Last Seen

March 13, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

SQL Injection Vulnerability in Elementor Ally Plugin Affects 250,000+ WordPress Sites72.0

A critical SQL injection vulnerability, tracked as CVE-2026-2313, has been discovered in the Ally WordPress plugin, which is used on over 400,000 sites. This flaw allows unauthenticated attackers to inject SQL commands via a user-supplied URL parameter, potentially leading to the theft of sensitive...