PT-2026-26841 · WordPress · Elementcamp

Itthidej Aramsri · Published 2026-03-21 · Updated 2026-03-21 · CVE-2026-2503

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ElementCamp plugin for WordPress versions prior to 2.3.7

Description The ElementCamp plugin for WordPress is susceptible to time-based SQL Injection. This occurs because user-provided data through the meta query[compare] parameter within the 'tcg select2 search post' AJAX action is incorporated into SQL queries without proper validation. The esc sql() function does not effectively sanitize the input when used as an SQL operator, allowing attackers to inject additional SQL queries. This could allow authenticated attackers with Author-level access or higher to extract sensitive information from the database.

Recommendations Update the ElementCamp plugin to version 2.3.7 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-2503

Affected Products

Elementcamp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-2503 · Security Note
• https://twitter.com/CVEnew/status/2035237246035796023 · Twitter Post
• https://plugins.trac.wordpress.org/browser/element-camp/tags/2.3.6/elementor/extender/tcg-select2.php#L83 · Note
• https://plugins.trac.wordpress.org/browser/element-camp/trunk/elementor/extender/tcg-select2.php#L65 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/cfb09dcd-f8ec-4b0a-ae77-4b4b7b54c93b?source=cve · Note
• https://plugins.trac.wordpress.org/browser/element-camp/tags/2.3.6/elementor/extender/tcg-select2.php#L65 · Note
• https://plugins.trac.wordpress.org/browser/element-camp/trunk/elementor/extender/tcg-select2.php#L83 · Note