Input validation vulnerability in Elementor Website Builder 3.12.2

The Elementor plugin for WordPress is a security risk for users of versions up to and including 3.12.1. Someone with administrator-level permissions could use the plugin’s ‘replace_urls’ functionality in an attempt to gain access to sensitive information from the database. This is possible because the plugin does not properly escape user-supplied parameters or adequately prepare existing SQL queries.