CVE Database /
CVE-2025-14155
CVE · Medium
CVE-2025-14155 — Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.11.54
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-14155
|
Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools [premium-addons-for-elementor] < 4.11.54 |
Missing Authorization |
Medium
5.3
|
< 4.11.54
|
4.11.54 |
2025-12-22 |
—
|
CVE-2025-14155
The Premium Addons for Elementor plugin contains a security flaw that allows unauthorized access to sensitive data. Specifically, the 'get_template_content' function lacks a necessary capability check in versions up to 4.11.53, enabling unauthenticated users to view restricted template content. This vulnerability affects all templates marked as private, draft, or pending.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings