SZB-8159c72282
EUVD lists author-level PHP object injection in Sastra Essential Addons for Elementor
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Fast Themes
- Product
- Sastra Essential Addons for Elementor
- First seen
Summary
An EUVD record (EUVD-2026-112994), shared via a Mastodon post, describes an author-level PHP object injection flaw in Sastra Essential Addons for Elementor up to version 1.2.3. The record gives a CVSS v3.1 score of 7.2/10 and was published 2026-10-29 and updated 2026-10-30.
If you use Fast Themes
Update Sastra Essential Addons for Elementor to a version later than 1.2.3 once available
Check EUVD-2026-112994 for vendor guidance and patch status
Limit author account privileges until the plugin is fixed
What the sources say 1
· Mastodon: “Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.” Source