CVE-2026-32471: WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

Q: What level of access does an attacker need to exploit this issue?

The vulnerability is described as a subscriber SQL injection issue, so an attacker needs subscriber-level access. No user interaction is required.

Q: What versions are affected?

ProLancer Element versions 1.4.8 and earlier are affected according to the available data.

Q: What is the potential impact if exploited?

The listed CVSS vector indicates network-reachable exploitation with low attack complexity, high confidentiality impact, and low availability impact. The scope is changed, meaning the impact may extend beyond the vulnerable component.

Published Aug 24, 2026

Updated

Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.

Affected Software

1 affected component

WordPress ProLancer Element<=1.4.8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress ProLancer Element plugin to a version that resolves this vulnerability.
Fixed in 1.4.8

Event History

Aug 24, 2026

CVE Published

via MITRE·11:54 AM

Data Sourced

via MITRE·11:54 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability is described as a subscriber SQL injection issue, so an attacker needs subscriber-level access. No user interaction is required.

What versions are affected?

ProLancer Element versions 1.4.8 and earlier are affected according to the available data.

What is the potential impact if exploited?

The listed CVSS vector indicates network-reachable exploitation with low attack complexity, high confidentiality impact, and low availability impact. The scope is changed, meaning the impact may extend beyond the vulnerable component.

CVE-2026-32471: WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What versions are affected?

What is the potential impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What versions are affected?

What is the potential impact if exploited?