CVE-2026-62109 is an SQL Injection vulnerability (CWE-89) in the editor component of wowDevs Sky Addons for Elementor versions <= 3.8.4. The vulnerability allows an attacker with high privileges to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. The CVSS v3.1 base score is 7.6, with network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact.

An attacker with high privileges can exploit this vulnerability to execute unauthorized SQL commands, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact) and partial denial of service (low availability impact). Integrity is not impacted according to the CVSS vector. This could compromise the security of the affected system's database.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the editor component to trusted users only and monitor for suspicious activity. Avoid exposing the vulnerable component to untrusted networks.