WebinarIgnition by Saleswonder LLC contains a critical SQL Injection vulnerability (CVE-2026-40797) that allows blind SQL injection attacks. This flaw affects versions up to 4.08.253. The vulnerability enables an attacker to execute unauthorized SQL commands, potentially leading to data confidentiality breaches and partial denial of service. No public exploits or patches are currently documented.